1 /*
2 * Server-side XDR for NFSv4
3 *
4 * Copyright (c) 2002 The Regents of the University of Michigan.
5 * All rights reserved.
6 *
7 * Kendrick Smith <kmsmith@umich.edu>
8 * Andy Adamson <andros@umich.edu>
9 *
10 * Redistribution and use in source and binary forms, with or without
11 * modification, are permitted provided that the following conditions
12 * are met:
13 *
14 * 1. Redistributions of source code must retain the above copyright
15 * notice, this list of conditions and the following disclaimer.
16 * 2. Redistributions in binary form must reproduce the above copyright
17 * notice, this list of conditions and the following disclaimer in the
18 * documentation and/or other materials provided with the distribution.
19 * 3. Neither the name of the University nor the names of its
20 * contributors may be used to endorse or promote products derived
21 * from this software without specific prior written permission.
22 *
23 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
24 * WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
25 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
26 * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
27 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
28 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
29 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
30 * BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
31 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
32 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
33 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
34 */
35
36 #include <linux/file.h>
37 #include <linux/slab.h>
38 #include <linux/namei.h>
39 #include <linux/statfs.h>
40 #include <linux/utsname.h>
41 #include <linux/pagemap.h>
42 #include <linux/sunrpc/svcauth_gss.h>
43
44 #include "idmap.h"
45 #include "acl.h"
46 #include "xdr4.h"
47 #include "vfs.h"
48 #include "state.h"
49 #include "cache.h"
50 #include "netns.h"
51 #include "pnfs.h"
52
53 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
54 #include <linux/security.h>
55 #endif
56
57
58 #define NFSDDBG_FACILITY NFSDDBG_XDR
59
60 const u32 nfsd_suppattrs[3][3] = {
61 {NFSD4_SUPPORTED_ATTRS_WORD0,
62 NFSD4_SUPPORTED_ATTRS_WORD1,
63 NFSD4_SUPPORTED_ATTRS_WORD2},
64
65 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
66 NFSD4_1_SUPPORTED_ATTRS_WORD1,
67 NFSD4_1_SUPPORTED_ATTRS_WORD2},
68
69 {NFSD4_1_SUPPORTED_ATTRS_WORD0,
70 NFSD4_1_SUPPORTED_ATTRS_WORD1,
71 NFSD4_2_SUPPORTED_ATTRS_WORD2},
72 };
73
74 /*
75 * As per referral draft, the fsid for a referral MUST be different from the fsid of the containing
76 * directory in order to indicate to the client that a filesystem boundary is present
77 * We use a fixed fsid for a referral
78 */
79 #define NFS4_REFERRAL_FSID_MAJOR 0x8000000ULL
80 #define NFS4_REFERRAL_FSID_MINOR 0x8000000ULL
81
82 static __be32
check_filename(char * str,int len)83 check_filename(char *str, int len)
84 {
85 int i;
86
87 if (len == 0)
88 return nfserr_inval;
89 if (isdotent(str, len))
90 return nfserr_badname;
91 for (i = 0; i < len; i++)
92 if (str[i] == '/')
93 return nfserr_badname;
94 return 0;
95 }
96
97 #define DECODE_HEAD \
98 __be32 *p; \
99 __be32 status
100 #define DECODE_TAIL \
101 status = 0; \
102 out: \
103 return status; \
104 xdr_error: \
105 dprintk("NFSD: xdr error (%s:%d)\n", \
106 __FILE__, __LINE__); \
107 status = nfserr_bad_xdr; \
108 goto out
109
110 #define READMEM(x,nbytes) do { \
111 x = (char *)p; \
112 p += XDR_QUADLEN(nbytes); \
113 } while (0)
114 #define SAVEMEM(x,nbytes) do { \
115 if (!(x = (p==argp->tmp || p == argp->tmpp) ? \
116 savemem(argp, p, nbytes) : \
117 (char *)p)) { \
118 dprintk("NFSD: xdr error (%s:%d)\n", \
119 __FILE__, __LINE__); \
120 goto xdr_error; \
121 } \
122 p += XDR_QUADLEN(nbytes); \
123 } while (0)
124 #define COPYMEM(x,nbytes) do { \
125 memcpy((x), p, nbytes); \
126 p += XDR_QUADLEN(nbytes); \
127 } while (0)
128
129 /* READ_BUF, read_buf(): nbytes must be <= PAGE_SIZE */
130 #define READ_BUF(nbytes) do { \
131 if (nbytes <= (u32)((char *)argp->end - (char *)argp->p)) { \
132 p = argp->p; \
133 argp->p += XDR_QUADLEN(nbytes); \
134 } else if (!(p = read_buf(argp, nbytes))) { \
135 dprintk("NFSD: xdr error (%s:%d)\n", \
136 __FILE__, __LINE__); \
137 goto xdr_error; \
138 } \
139 } while (0)
140
next_decode_page(struct nfsd4_compoundargs * argp)141 static void next_decode_page(struct nfsd4_compoundargs *argp)
142 {
143 argp->p = page_address(argp->pagelist[0]);
144 argp->pagelist++;
145 if (argp->pagelen < PAGE_SIZE) {
146 argp->end = argp->p + XDR_QUADLEN(argp->pagelen);
147 argp->pagelen = 0;
148 } else {
149 argp->end = argp->p + (PAGE_SIZE>>2);
150 argp->pagelen -= PAGE_SIZE;
151 }
152 }
153
read_buf(struct nfsd4_compoundargs * argp,u32 nbytes)154 static __be32 *read_buf(struct nfsd4_compoundargs *argp, u32 nbytes)
155 {
156 /* We want more bytes than seem to be available.
157 * Maybe we need a new page, maybe we have just run out
158 */
159 unsigned int avail = (char *)argp->end - (char *)argp->p;
160 __be32 *p;
161
162 if (argp->pagelen == 0) {
163 struct kvec *vec = &argp->rqstp->rq_arg.tail[0];
164
165 if (!argp->tail) {
166 argp->tail = true;
167 avail = vec->iov_len;
168 argp->p = vec->iov_base;
169 argp->end = vec->iov_base + avail;
170 }
171
172 if (avail < nbytes)
173 return NULL;
174
175 p = argp->p;
176 argp->p += XDR_QUADLEN(nbytes);
177 return p;
178 }
179
180 if (avail + argp->pagelen < nbytes)
181 return NULL;
182 if (avail + PAGE_SIZE < nbytes) /* need more than a page !! */
183 return NULL;
184 /* ok, we can do it with the current plus the next page */
185 if (nbytes <= sizeof(argp->tmp))
186 p = argp->tmp;
187 else {
188 kfree(argp->tmpp);
189 p = argp->tmpp = kmalloc(nbytes, GFP_KERNEL);
190 if (!p)
191 return NULL;
192
193 }
194 /*
195 * The following memcpy is safe because read_buf is always
196 * called with nbytes > avail, and the two cases above both
197 * guarantee p points to at least nbytes bytes.
198 */
199 memcpy(p, argp->p, avail);
200 next_decode_page(argp);
201 memcpy(((char*)p)+avail, argp->p, (nbytes - avail));
202 argp->p += XDR_QUADLEN(nbytes - avail);
203 return p;
204 }
205
zero_clientid(clientid_t * clid)206 static int zero_clientid(clientid_t *clid)
207 {
208 return (clid->cl_boot == 0) && (clid->cl_id == 0);
209 }
210
211 /**
212 * svcxdr_tmpalloc - allocate memory to be freed after compound processing
213 * @argp: NFSv4 compound argument structure
214 * @p: pointer to be freed (with kfree())
215 *
216 * Marks @p to be freed when processing the compound operation
217 * described in @argp finishes.
218 */
219 static void *
svcxdr_tmpalloc(struct nfsd4_compoundargs * argp,u32 len)220 svcxdr_tmpalloc(struct nfsd4_compoundargs *argp, u32 len)
221 {
222 struct svcxdr_tmpbuf *tb;
223
224 tb = kmalloc(sizeof(*tb) + len, GFP_KERNEL);
225 if (!tb)
226 return NULL;
227 tb->next = argp->to_free;
228 argp->to_free = tb;
229 return tb->buf;
230 }
231
232 /*
233 * For xdr strings that need to be passed to other kernel api's
234 * as null-terminated strings.
235 *
236 * Note null-terminating in place usually isn't safe since the
237 * buffer might end on a page boundary.
238 */
239 static char *
svcxdr_dupstr(struct nfsd4_compoundargs * argp,void * buf,u32 len)240 svcxdr_dupstr(struct nfsd4_compoundargs *argp, void *buf, u32 len)
241 {
242 char *p = svcxdr_tmpalloc(argp, len + 1);
243
244 if (!p)
245 return NULL;
246 memcpy(p, buf, len);
247 p[len] = '\0';
248 return p;
249 }
250
251 /**
252 * savemem - duplicate a chunk of memory for later processing
253 * @argp: NFSv4 compound argument structure to be freed with
254 * @p: pointer to be duplicated
255 * @nbytes: length to be duplicated
256 *
257 * Returns a pointer to a copy of @nbytes bytes of memory at @p
258 * that are preserved until processing of the NFSv4 compound
259 * operation described by @argp finishes.
260 */
savemem(struct nfsd4_compoundargs * argp,__be32 * p,int nbytes)261 static char *savemem(struct nfsd4_compoundargs *argp, __be32 *p, int nbytes)
262 {
263 void *ret;
264
265 ret = svcxdr_tmpalloc(argp, nbytes);
266 if (!ret)
267 return NULL;
268 memcpy(ret, p, nbytes);
269 return ret;
270 }
271
272 /*
273 * We require the high 32 bits of 'seconds' to be 0, and
274 * we ignore all 32 bits of 'nseconds'.
275 */
276 static __be32
nfsd4_decode_time(struct nfsd4_compoundargs * argp,struct timespec * tv)277 nfsd4_decode_time(struct nfsd4_compoundargs *argp, struct timespec *tv)
278 {
279 DECODE_HEAD;
280 u64 sec;
281
282 READ_BUF(12);
283 p = xdr_decode_hyper(p, &sec);
284 tv->tv_sec = sec;
285 tv->tv_nsec = be32_to_cpup(p++);
286 if (tv->tv_nsec >= (u32)1000000000)
287 return nfserr_inval;
288
289 DECODE_TAIL;
290 }
291
292 static __be32
nfsd4_decode_bitmap(struct nfsd4_compoundargs * argp,u32 * bmval)293 nfsd4_decode_bitmap(struct nfsd4_compoundargs *argp, u32 *bmval)
294 {
295 u32 bmlen;
296 DECODE_HEAD;
297
298 bmval[0] = 0;
299 bmval[1] = 0;
300 bmval[2] = 0;
301
302 READ_BUF(4);
303 bmlen = be32_to_cpup(p++);
304 if (bmlen > 1000)
305 goto xdr_error;
306
307 READ_BUF(bmlen << 2);
308 if (bmlen > 0)
309 bmval[0] = be32_to_cpup(p++);
310 if (bmlen > 1)
311 bmval[1] = be32_to_cpup(p++);
312 if (bmlen > 2)
313 bmval[2] = be32_to_cpup(p++);
314
315 DECODE_TAIL;
316 }
317
318 static __be32
nfsd4_decode_fattr(struct nfsd4_compoundargs * argp,u32 * bmval,struct iattr * iattr,struct nfs4_acl ** acl,struct xdr_netobj * label,int * umask)319 nfsd4_decode_fattr(struct nfsd4_compoundargs *argp, u32 *bmval,
320 struct iattr *iattr, struct nfs4_acl **acl,
321 struct xdr_netobj *label, int *umask)
322 {
323 int expected_len, len = 0;
324 u32 dummy32;
325 char *buf;
326
327 DECODE_HEAD;
328 iattr->ia_valid = 0;
329 if ((status = nfsd4_decode_bitmap(argp, bmval)))
330 return status;
331
332 if (bmval[0] & ~NFSD_WRITEABLE_ATTRS_WORD0
333 || bmval[1] & ~NFSD_WRITEABLE_ATTRS_WORD1
334 || bmval[2] & ~NFSD_WRITEABLE_ATTRS_WORD2) {
335 if (nfsd_attrs_supported(argp->minorversion, bmval))
336 return nfserr_inval;
337 return nfserr_attrnotsupp;
338 }
339
340 READ_BUF(4);
341 expected_len = be32_to_cpup(p++);
342
343 if (bmval[0] & FATTR4_WORD0_SIZE) {
344 READ_BUF(8);
345 len += 8;
346 p = xdr_decode_hyper(p, &iattr->ia_size);
347 iattr->ia_valid |= ATTR_SIZE;
348 }
349 if (bmval[0] & FATTR4_WORD0_ACL) {
350 u32 nace;
351 struct nfs4_ace *ace;
352
353 READ_BUF(4); len += 4;
354 nace = be32_to_cpup(p++);
355
356 if (nace > NFS4_ACL_MAX)
357 return nfserr_fbig;
358
359 *acl = svcxdr_tmpalloc(argp, nfs4_acl_bytes(nace));
360 if (*acl == NULL)
361 return nfserr_jukebox;
362
363 (*acl)->naces = nace;
364 for (ace = (*acl)->aces; ace < (*acl)->aces + nace; ace++) {
365 READ_BUF(16); len += 16;
366 ace->type = be32_to_cpup(p++);
367 ace->flag = be32_to_cpup(p++);
368 ace->access_mask = be32_to_cpup(p++);
369 dummy32 = be32_to_cpup(p++);
370 READ_BUF(dummy32);
371 len += XDR_QUADLEN(dummy32) << 2;
372 READMEM(buf, dummy32);
373 ace->whotype = nfs4_acl_get_whotype(buf, dummy32);
374 status = nfs_ok;
375 if (ace->whotype != NFS4_ACL_WHO_NAMED)
376 ;
377 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
378 status = nfsd_map_name_to_gid(argp->rqstp,
379 buf, dummy32, &ace->who_gid);
380 else
381 status = nfsd_map_name_to_uid(argp->rqstp,
382 buf, dummy32, &ace->who_uid);
383 if (status)
384 return status;
385 }
386 } else
387 *acl = NULL;
388 if (bmval[1] & FATTR4_WORD1_MODE) {
389 READ_BUF(4);
390 len += 4;
391 iattr->ia_mode = be32_to_cpup(p++);
392 iattr->ia_mode &= (S_IFMT | S_IALLUGO);
393 iattr->ia_valid |= ATTR_MODE;
394 }
395 if (bmval[1] & FATTR4_WORD1_OWNER) {
396 READ_BUF(4);
397 len += 4;
398 dummy32 = be32_to_cpup(p++);
399 READ_BUF(dummy32);
400 len += (XDR_QUADLEN(dummy32) << 2);
401 READMEM(buf, dummy32);
402 if ((status = nfsd_map_name_to_uid(argp->rqstp, buf, dummy32, &iattr->ia_uid)))
403 return status;
404 iattr->ia_valid |= ATTR_UID;
405 }
406 if (bmval[1] & FATTR4_WORD1_OWNER_GROUP) {
407 READ_BUF(4);
408 len += 4;
409 dummy32 = be32_to_cpup(p++);
410 READ_BUF(dummy32);
411 len += (XDR_QUADLEN(dummy32) << 2);
412 READMEM(buf, dummy32);
413 if ((status = nfsd_map_name_to_gid(argp->rqstp, buf, dummy32, &iattr->ia_gid)))
414 return status;
415 iattr->ia_valid |= ATTR_GID;
416 }
417 if (bmval[1] & FATTR4_WORD1_TIME_ACCESS_SET) {
418 READ_BUF(4);
419 len += 4;
420 dummy32 = be32_to_cpup(p++);
421 switch (dummy32) {
422 case NFS4_SET_TO_CLIENT_TIME:
423 len += 12;
424 status = nfsd4_decode_time(argp, &iattr->ia_atime);
425 if (status)
426 return status;
427 iattr->ia_valid |= (ATTR_ATIME | ATTR_ATIME_SET);
428 break;
429 case NFS4_SET_TO_SERVER_TIME:
430 iattr->ia_valid |= ATTR_ATIME;
431 break;
432 default:
433 goto xdr_error;
434 }
435 }
436 if (bmval[1] & FATTR4_WORD1_TIME_MODIFY_SET) {
437 READ_BUF(4);
438 len += 4;
439 dummy32 = be32_to_cpup(p++);
440 switch (dummy32) {
441 case NFS4_SET_TO_CLIENT_TIME:
442 len += 12;
443 status = nfsd4_decode_time(argp, &iattr->ia_mtime);
444 if (status)
445 return status;
446 iattr->ia_valid |= (ATTR_MTIME | ATTR_MTIME_SET);
447 break;
448 case NFS4_SET_TO_SERVER_TIME:
449 iattr->ia_valid |= ATTR_MTIME;
450 break;
451 default:
452 goto xdr_error;
453 }
454 }
455
456 label->len = 0;
457 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
458 if (bmval[2] & FATTR4_WORD2_SECURITY_LABEL) {
459 READ_BUF(4);
460 len += 4;
461 dummy32 = be32_to_cpup(p++); /* lfs: we don't use it */
462 READ_BUF(4);
463 len += 4;
464 dummy32 = be32_to_cpup(p++); /* pi: we don't use it either */
465 READ_BUF(4);
466 len += 4;
467 dummy32 = be32_to_cpup(p++);
468 READ_BUF(dummy32);
469 if (dummy32 > NFS4_MAXLABELLEN)
470 return nfserr_badlabel;
471 len += (XDR_QUADLEN(dummy32) << 2);
472 READMEM(buf, dummy32);
473 label->len = dummy32;
474 label->data = svcxdr_dupstr(argp, buf, dummy32);
475 if (!label->data)
476 return nfserr_jukebox;
477 }
478 #endif
479 if (bmval[2] & FATTR4_WORD2_MODE_UMASK) {
480 if (!umask)
481 goto xdr_error;
482 READ_BUF(8);
483 len += 8;
484 dummy32 = be32_to_cpup(p++);
485 iattr->ia_mode = dummy32 & (S_IFMT | S_IALLUGO);
486 dummy32 = be32_to_cpup(p++);
487 *umask = dummy32 & S_IRWXUGO;
488 iattr->ia_valid |= ATTR_MODE;
489 }
490 if (len != expected_len)
491 goto xdr_error;
492
493 DECODE_TAIL;
494 }
495
496 static __be32
nfsd4_decode_stateid(struct nfsd4_compoundargs * argp,stateid_t * sid)497 nfsd4_decode_stateid(struct nfsd4_compoundargs *argp, stateid_t *sid)
498 {
499 DECODE_HEAD;
500
501 READ_BUF(sizeof(stateid_t));
502 sid->si_generation = be32_to_cpup(p++);
503 COPYMEM(&sid->si_opaque, sizeof(stateid_opaque_t));
504
505 DECODE_TAIL;
506 }
507
508 static __be32
nfsd4_decode_access(struct nfsd4_compoundargs * argp,struct nfsd4_access * access)509 nfsd4_decode_access(struct nfsd4_compoundargs *argp, struct nfsd4_access *access)
510 {
511 DECODE_HEAD;
512
513 READ_BUF(4);
514 access->ac_req_access = be32_to_cpup(p++);
515
516 DECODE_TAIL;
517 }
518
nfsd4_decode_cb_sec(struct nfsd4_compoundargs * argp,struct nfsd4_cb_sec * cbs)519 static __be32 nfsd4_decode_cb_sec(struct nfsd4_compoundargs *argp, struct nfsd4_cb_sec *cbs)
520 {
521 DECODE_HEAD;
522 u32 dummy, uid, gid;
523 char *machine_name;
524 int i;
525 int nr_secflavs;
526
527 /* callback_sec_params4 */
528 READ_BUF(4);
529 nr_secflavs = be32_to_cpup(p++);
530 if (nr_secflavs)
531 cbs->flavor = (u32)(-1);
532 else
533 /* Is this legal? Be generous, take it to mean AUTH_NONE: */
534 cbs->flavor = 0;
535 for (i = 0; i < nr_secflavs; ++i) {
536 READ_BUF(4);
537 dummy = be32_to_cpup(p++);
538 switch (dummy) {
539 case RPC_AUTH_NULL:
540 /* Nothing to read */
541 if (cbs->flavor == (u32)(-1))
542 cbs->flavor = RPC_AUTH_NULL;
543 break;
544 case RPC_AUTH_UNIX:
545 READ_BUF(8);
546 /* stamp */
547 dummy = be32_to_cpup(p++);
548
549 /* machine name */
550 dummy = be32_to_cpup(p++);
551 READ_BUF(dummy);
552 SAVEMEM(machine_name, dummy);
553
554 /* uid, gid */
555 READ_BUF(8);
556 uid = be32_to_cpup(p++);
557 gid = be32_to_cpup(p++);
558
559 /* more gids */
560 READ_BUF(4);
561 dummy = be32_to_cpup(p++);
562 READ_BUF(dummy * 4);
563 if (cbs->flavor == (u32)(-1)) {
564 kuid_t kuid = make_kuid(&init_user_ns, uid);
565 kgid_t kgid = make_kgid(&init_user_ns, gid);
566 if (uid_valid(kuid) && gid_valid(kgid)) {
567 cbs->uid = kuid;
568 cbs->gid = kgid;
569 cbs->flavor = RPC_AUTH_UNIX;
570 } else {
571 dprintk("RPC_AUTH_UNIX with invalid"
572 "uid or gid ignoring!\n");
573 }
574 }
575 break;
576 case RPC_AUTH_GSS:
577 dprintk("RPC_AUTH_GSS callback secflavor "
578 "not supported!\n");
579 READ_BUF(8);
580 /* gcbp_service */
581 dummy = be32_to_cpup(p++);
582 /* gcbp_handle_from_server */
583 dummy = be32_to_cpup(p++);
584 READ_BUF(dummy);
585 p += XDR_QUADLEN(dummy);
586 /* gcbp_handle_from_client */
587 READ_BUF(4);
588 dummy = be32_to_cpup(p++);
589 READ_BUF(dummy);
590 break;
591 default:
592 dprintk("Illegal callback secflavor\n");
593 return nfserr_inval;
594 }
595 }
596 DECODE_TAIL;
597 }
598
nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs * argp,struct nfsd4_backchannel_ctl * bc)599 static __be32 nfsd4_decode_backchannel_ctl(struct nfsd4_compoundargs *argp, struct nfsd4_backchannel_ctl *bc)
600 {
601 DECODE_HEAD;
602
603 READ_BUF(4);
604 bc->bc_cb_program = be32_to_cpup(p++);
605 nfsd4_decode_cb_sec(argp, &bc->bc_cb_sec);
606
607 DECODE_TAIL;
608 }
609
nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs * argp,struct nfsd4_bind_conn_to_session * bcts)610 static __be32 nfsd4_decode_bind_conn_to_session(struct nfsd4_compoundargs *argp, struct nfsd4_bind_conn_to_session *bcts)
611 {
612 DECODE_HEAD;
613
614 READ_BUF(NFS4_MAX_SESSIONID_LEN + 8);
615 COPYMEM(bcts->sessionid.data, NFS4_MAX_SESSIONID_LEN);
616 bcts->dir = be32_to_cpup(p++);
617 /* XXX: skipping ctsa_use_conn_in_rdma_mode. Perhaps Tom Tucker
618 * could help us figure out we should be using it. */
619 DECODE_TAIL;
620 }
621
622 static __be32
nfsd4_decode_close(struct nfsd4_compoundargs * argp,struct nfsd4_close * close)623 nfsd4_decode_close(struct nfsd4_compoundargs *argp, struct nfsd4_close *close)
624 {
625 DECODE_HEAD;
626
627 READ_BUF(4);
628 close->cl_seqid = be32_to_cpup(p++);
629 return nfsd4_decode_stateid(argp, &close->cl_stateid);
630
631 DECODE_TAIL;
632 }
633
634
635 static __be32
nfsd4_decode_commit(struct nfsd4_compoundargs * argp,struct nfsd4_commit * commit)636 nfsd4_decode_commit(struct nfsd4_compoundargs *argp, struct nfsd4_commit *commit)
637 {
638 DECODE_HEAD;
639
640 READ_BUF(12);
641 p = xdr_decode_hyper(p, &commit->co_offset);
642 commit->co_count = be32_to_cpup(p++);
643
644 DECODE_TAIL;
645 }
646
647 static __be32
nfsd4_decode_create(struct nfsd4_compoundargs * argp,struct nfsd4_create * create)648 nfsd4_decode_create(struct nfsd4_compoundargs *argp, struct nfsd4_create *create)
649 {
650 DECODE_HEAD;
651
652 READ_BUF(4);
653 create->cr_type = be32_to_cpup(p++);
654 switch (create->cr_type) {
655 case NF4LNK:
656 READ_BUF(4);
657 create->cr_datalen = be32_to_cpup(p++);
658 READ_BUF(create->cr_datalen);
659 create->cr_data = svcxdr_dupstr(argp, p, create->cr_datalen);
660 if (!create->cr_data)
661 return nfserr_jukebox;
662 break;
663 case NF4BLK:
664 case NF4CHR:
665 READ_BUF(8);
666 create->cr_specdata1 = be32_to_cpup(p++);
667 create->cr_specdata2 = be32_to_cpup(p++);
668 break;
669 case NF4SOCK:
670 case NF4FIFO:
671 case NF4DIR:
672 default:
673 break;
674 }
675
676 READ_BUF(4);
677 create->cr_namelen = be32_to_cpup(p++);
678 READ_BUF(create->cr_namelen);
679 SAVEMEM(create->cr_name, create->cr_namelen);
680 if ((status = check_filename(create->cr_name, create->cr_namelen)))
681 return status;
682
683 status = nfsd4_decode_fattr(argp, create->cr_bmval, &create->cr_iattr,
684 &create->cr_acl, &create->cr_label,
685 &create->cr_umask);
686 if (status)
687 goto out;
688
689 DECODE_TAIL;
690 }
691
692 static inline __be32
nfsd4_decode_delegreturn(struct nfsd4_compoundargs * argp,struct nfsd4_delegreturn * dr)693 nfsd4_decode_delegreturn(struct nfsd4_compoundargs *argp, struct nfsd4_delegreturn *dr)
694 {
695 return nfsd4_decode_stateid(argp, &dr->dr_stateid);
696 }
697
698 static inline __be32
nfsd4_decode_getattr(struct nfsd4_compoundargs * argp,struct nfsd4_getattr * getattr)699 nfsd4_decode_getattr(struct nfsd4_compoundargs *argp, struct nfsd4_getattr *getattr)
700 {
701 return nfsd4_decode_bitmap(argp, getattr->ga_bmval);
702 }
703
704 static __be32
nfsd4_decode_link(struct nfsd4_compoundargs * argp,struct nfsd4_link * link)705 nfsd4_decode_link(struct nfsd4_compoundargs *argp, struct nfsd4_link *link)
706 {
707 DECODE_HEAD;
708
709 READ_BUF(4);
710 link->li_namelen = be32_to_cpup(p++);
711 READ_BUF(link->li_namelen);
712 SAVEMEM(link->li_name, link->li_namelen);
713 if ((status = check_filename(link->li_name, link->li_namelen)))
714 return status;
715
716 DECODE_TAIL;
717 }
718
719 static __be32
nfsd4_decode_lock(struct nfsd4_compoundargs * argp,struct nfsd4_lock * lock)720 nfsd4_decode_lock(struct nfsd4_compoundargs *argp, struct nfsd4_lock *lock)
721 {
722 DECODE_HEAD;
723
724 /*
725 * type, reclaim(boolean), offset, length, new_lock_owner(boolean)
726 */
727 READ_BUF(28);
728 lock->lk_type = be32_to_cpup(p++);
729 if ((lock->lk_type < NFS4_READ_LT) || (lock->lk_type > NFS4_WRITEW_LT))
730 goto xdr_error;
731 lock->lk_reclaim = be32_to_cpup(p++);
732 p = xdr_decode_hyper(p, &lock->lk_offset);
733 p = xdr_decode_hyper(p, &lock->lk_length);
734 lock->lk_is_new = be32_to_cpup(p++);
735
736 if (lock->lk_is_new) {
737 READ_BUF(4);
738 lock->lk_new_open_seqid = be32_to_cpup(p++);
739 status = nfsd4_decode_stateid(argp, &lock->lk_new_open_stateid);
740 if (status)
741 return status;
742 READ_BUF(8 + sizeof(clientid_t));
743 lock->lk_new_lock_seqid = be32_to_cpup(p++);
744 COPYMEM(&lock->lk_new_clientid, sizeof(clientid_t));
745 lock->lk_new_owner.len = be32_to_cpup(p++);
746 READ_BUF(lock->lk_new_owner.len);
747 READMEM(lock->lk_new_owner.data, lock->lk_new_owner.len);
748 } else {
749 status = nfsd4_decode_stateid(argp, &lock->lk_old_lock_stateid);
750 if (status)
751 return status;
752 READ_BUF(4);
753 lock->lk_old_lock_seqid = be32_to_cpup(p++);
754 }
755
756 DECODE_TAIL;
757 }
758
759 static __be32
nfsd4_decode_lockt(struct nfsd4_compoundargs * argp,struct nfsd4_lockt * lockt)760 nfsd4_decode_lockt(struct nfsd4_compoundargs *argp, struct nfsd4_lockt *lockt)
761 {
762 DECODE_HEAD;
763
764 READ_BUF(32);
765 lockt->lt_type = be32_to_cpup(p++);
766 if((lockt->lt_type < NFS4_READ_LT) || (lockt->lt_type > NFS4_WRITEW_LT))
767 goto xdr_error;
768 p = xdr_decode_hyper(p, &lockt->lt_offset);
769 p = xdr_decode_hyper(p, &lockt->lt_length);
770 COPYMEM(&lockt->lt_clientid, 8);
771 lockt->lt_owner.len = be32_to_cpup(p++);
772 READ_BUF(lockt->lt_owner.len);
773 READMEM(lockt->lt_owner.data, lockt->lt_owner.len);
774
775 DECODE_TAIL;
776 }
777
778 static __be32
nfsd4_decode_locku(struct nfsd4_compoundargs * argp,struct nfsd4_locku * locku)779 nfsd4_decode_locku(struct nfsd4_compoundargs *argp, struct nfsd4_locku *locku)
780 {
781 DECODE_HEAD;
782
783 READ_BUF(8);
784 locku->lu_type = be32_to_cpup(p++);
785 if ((locku->lu_type < NFS4_READ_LT) || (locku->lu_type > NFS4_WRITEW_LT))
786 goto xdr_error;
787 locku->lu_seqid = be32_to_cpup(p++);
788 status = nfsd4_decode_stateid(argp, &locku->lu_stateid);
789 if (status)
790 return status;
791 READ_BUF(16);
792 p = xdr_decode_hyper(p, &locku->lu_offset);
793 p = xdr_decode_hyper(p, &locku->lu_length);
794
795 DECODE_TAIL;
796 }
797
798 static __be32
nfsd4_decode_lookup(struct nfsd4_compoundargs * argp,struct nfsd4_lookup * lookup)799 nfsd4_decode_lookup(struct nfsd4_compoundargs *argp, struct nfsd4_lookup *lookup)
800 {
801 DECODE_HEAD;
802
803 READ_BUF(4);
804 lookup->lo_len = be32_to_cpup(p++);
805 READ_BUF(lookup->lo_len);
806 SAVEMEM(lookup->lo_name, lookup->lo_len);
807 if ((status = check_filename(lookup->lo_name, lookup->lo_len)))
808 return status;
809
810 DECODE_TAIL;
811 }
812
nfsd4_decode_share_access(struct nfsd4_compoundargs * argp,u32 * share_access,u32 * deleg_want,u32 * deleg_when)813 static __be32 nfsd4_decode_share_access(struct nfsd4_compoundargs *argp, u32 *share_access, u32 *deleg_want, u32 *deleg_when)
814 {
815 __be32 *p;
816 u32 w;
817
818 READ_BUF(4);
819 w = be32_to_cpup(p++);
820 *share_access = w & NFS4_SHARE_ACCESS_MASK;
821 *deleg_want = w & NFS4_SHARE_WANT_MASK;
822 if (deleg_when)
823 *deleg_when = w & NFS4_SHARE_WHEN_MASK;
824
825 switch (w & NFS4_SHARE_ACCESS_MASK) {
826 case NFS4_SHARE_ACCESS_READ:
827 case NFS4_SHARE_ACCESS_WRITE:
828 case NFS4_SHARE_ACCESS_BOTH:
829 break;
830 default:
831 return nfserr_bad_xdr;
832 }
833 w &= ~NFS4_SHARE_ACCESS_MASK;
834 if (!w)
835 return nfs_ok;
836 if (!argp->minorversion)
837 return nfserr_bad_xdr;
838 switch (w & NFS4_SHARE_WANT_MASK) {
839 case NFS4_SHARE_WANT_NO_PREFERENCE:
840 case NFS4_SHARE_WANT_READ_DELEG:
841 case NFS4_SHARE_WANT_WRITE_DELEG:
842 case NFS4_SHARE_WANT_ANY_DELEG:
843 case NFS4_SHARE_WANT_NO_DELEG:
844 case NFS4_SHARE_WANT_CANCEL:
845 break;
846 default:
847 return nfserr_bad_xdr;
848 }
849 w &= ~NFS4_SHARE_WANT_MASK;
850 if (!w)
851 return nfs_ok;
852
853 if (!deleg_when) /* open_downgrade */
854 return nfserr_inval;
855 switch (w) {
856 case NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL:
857 case NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED:
858 case (NFS4_SHARE_SIGNAL_DELEG_WHEN_RESRC_AVAIL |
859 NFS4_SHARE_PUSH_DELEG_WHEN_UNCONTENDED):
860 return nfs_ok;
861 }
862 xdr_error:
863 return nfserr_bad_xdr;
864 }
865
nfsd4_decode_share_deny(struct nfsd4_compoundargs * argp,u32 * x)866 static __be32 nfsd4_decode_share_deny(struct nfsd4_compoundargs *argp, u32 *x)
867 {
868 __be32 *p;
869
870 READ_BUF(4);
871 *x = be32_to_cpup(p++);
872 /* Note: unlinke access bits, deny bits may be zero. */
873 if (*x & ~NFS4_SHARE_DENY_BOTH)
874 return nfserr_bad_xdr;
875 return nfs_ok;
876 xdr_error:
877 return nfserr_bad_xdr;
878 }
879
nfsd4_decode_opaque(struct nfsd4_compoundargs * argp,struct xdr_netobj * o)880 static __be32 nfsd4_decode_opaque(struct nfsd4_compoundargs *argp, struct xdr_netobj *o)
881 {
882 __be32 *p;
883
884 READ_BUF(4);
885 o->len = be32_to_cpup(p++);
886
887 if (o->len == 0 || o->len > NFS4_OPAQUE_LIMIT)
888 return nfserr_bad_xdr;
889
890 READ_BUF(o->len);
891 SAVEMEM(o->data, o->len);
892 return nfs_ok;
893 xdr_error:
894 return nfserr_bad_xdr;
895 }
896
897 static __be32
nfsd4_decode_open(struct nfsd4_compoundargs * argp,struct nfsd4_open * open)898 nfsd4_decode_open(struct nfsd4_compoundargs *argp, struct nfsd4_open *open)
899 {
900 DECODE_HEAD;
901 u32 dummy;
902
903 memset(open->op_bmval, 0, sizeof(open->op_bmval));
904 open->op_iattr.ia_valid = 0;
905 open->op_openowner = NULL;
906
907 open->op_xdr_error = 0;
908 /* seqid, share_access, share_deny, clientid, ownerlen */
909 READ_BUF(4);
910 open->op_seqid = be32_to_cpup(p++);
911 /* decode, yet ignore deleg_when until supported */
912 status = nfsd4_decode_share_access(argp, &open->op_share_access,
913 &open->op_deleg_want, &dummy);
914 if (status)
915 goto xdr_error;
916 status = nfsd4_decode_share_deny(argp, &open->op_share_deny);
917 if (status)
918 goto xdr_error;
919 READ_BUF(sizeof(clientid_t));
920 COPYMEM(&open->op_clientid, sizeof(clientid_t));
921 status = nfsd4_decode_opaque(argp, &open->op_owner);
922 if (status)
923 goto xdr_error;
924 READ_BUF(4);
925 open->op_create = be32_to_cpup(p++);
926 switch (open->op_create) {
927 case NFS4_OPEN_NOCREATE:
928 break;
929 case NFS4_OPEN_CREATE:
930 READ_BUF(4);
931 open->op_createmode = be32_to_cpup(p++);
932 switch (open->op_createmode) {
933 case NFS4_CREATE_UNCHECKED:
934 case NFS4_CREATE_GUARDED:
935 status = nfsd4_decode_fattr(argp, open->op_bmval,
936 &open->op_iattr, &open->op_acl, &open->op_label,
937 &open->op_umask);
938 if (status)
939 goto out;
940 break;
941 case NFS4_CREATE_EXCLUSIVE:
942 READ_BUF(NFS4_VERIFIER_SIZE);
943 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
944 break;
945 case NFS4_CREATE_EXCLUSIVE4_1:
946 if (argp->minorversion < 1)
947 goto xdr_error;
948 READ_BUF(NFS4_VERIFIER_SIZE);
949 COPYMEM(open->op_verf.data, NFS4_VERIFIER_SIZE);
950 status = nfsd4_decode_fattr(argp, open->op_bmval,
951 &open->op_iattr, &open->op_acl, &open->op_label,
952 &open->op_umask);
953 if (status)
954 goto out;
955 break;
956 default:
957 goto xdr_error;
958 }
959 break;
960 default:
961 goto xdr_error;
962 }
963
964 /* open_claim */
965 READ_BUF(4);
966 open->op_claim_type = be32_to_cpup(p++);
967 switch (open->op_claim_type) {
968 case NFS4_OPEN_CLAIM_NULL:
969 case NFS4_OPEN_CLAIM_DELEGATE_PREV:
970 READ_BUF(4);
971 open->op_fname.len = be32_to_cpup(p++);
972 READ_BUF(open->op_fname.len);
973 SAVEMEM(open->op_fname.data, open->op_fname.len);
974 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
975 return status;
976 break;
977 case NFS4_OPEN_CLAIM_PREVIOUS:
978 READ_BUF(4);
979 open->op_delegate_type = be32_to_cpup(p++);
980 break;
981 case NFS4_OPEN_CLAIM_DELEGATE_CUR:
982 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
983 if (status)
984 return status;
985 READ_BUF(4);
986 open->op_fname.len = be32_to_cpup(p++);
987 READ_BUF(open->op_fname.len);
988 SAVEMEM(open->op_fname.data, open->op_fname.len);
989 if ((status = check_filename(open->op_fname.data, open->op_fname.len)))
990 return status;
991 break;
992 case NFS4_OPEN_CLAIM_FH:
993 case NFS4_OPEN_CLAIM_DELEG_PREV_FH:
994 if (argp->minorversion < 1)
995 goto xdr_error;
996 /* void */
997 break;
998 case NFS4_OPEN_CLAIM_DELEG_CUR_FH:
999 if (argp->minorversion < 1)
1000 goto xdr_error;
1001 status = nfsd4_decode_stateid(argp, &open->op_delegate_stateid);
1002 if (status)
1003 return status;
1004 break;
1005 default:
1006 goto xdr_error;
1007 }
1008
1009 DECODE_TAIL;
1010 }
1011
1012 static __be32
nfsd4_decode_open_confirm(struct nfsd4_compoundargs * argp,struct nfsd4_open_confirm * open_conf)1013 nfsd4_decode_open_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_open_confirm *open_conf)
1014 {
1015 DECODE_HEAD;
1016
1017 if (argp->minorversion >= 1)
1018 return nfserr_notsupp;
1019
1020 status = nfsd4_decode_stateid(argp, &open_conf->oc_req_stateid);
1021 if (status)
1022 return status;
1023 READ_BUF(4);
1024 open_conf->oc_seqid = be32_to_cpup(p++);
1025
1026 DECODE_TAIL;
1027 }
1028
1029 static __be32
nfsd4_decode_open_downgrade(struct nfsd4_compoundargs * argp,struct nfsd4_open_downgrade * open_down)1030 nfsd4_decode_open_downgrade(struct nfsd4_compoundargs *argp, struct nfsd4_open_downgrade *open_down)
1031 {
1032 DECODE_HEAD;
1033
1034 status = nfsd4_decode_stateid(argp, &open_down->od_stateid);
1035 if (status)
1036 return status;
1037 READ_BUF(4);
1038 open_down->od_seqid = be32_to_cpup(p++);
1039 status = nfsd4_decode_share_access(argp, &open_down->od_share_access,
1040 &open_down->od_deleg_want, NULL);
1041 if (status)
1042 return status;
1043 status = nfsd4_decode_share_deny(argp, &open_down->od_share_deny);
1044 if (status)
1045 return status;
1046 DECODE_TAIL;
1047 }
1048
1049 static __be32
nfsd4_decode_putfh(struct nfsd4_compoundargs * argp,struct nfsd4_putfh * putfh)1050 nfsd4_decode_putfh(struct nfsd4_compoundargs *argp, struct nfsd4_putfh *putfh)
1051 {
1052 DECODE_HEAD;
1053
1054 READ_BUF(4);
1055 putfh->pf_fhlen = be32_to_cpup(p++);
1056 if (putfh->pf_fhlen > NFS4_FHSIZE)
1057 goto xdr_error;
1058 READ_BUF(putfh->pf_fhlen);
1059 SAVEMEM(putfh->pf_fhval, putfh->pf_fhlen);
1060
1061 DECODE_TAIL;
1062 }
1063
1064 static __be32
nfsd4_decode_putpubfh(struct nfsd4_compoundargs * argp,void * p)1065 nfsd4_decode_putpubfh(struct nfsd4_compoundargs *argp, void *p)
1066 {
1067 if (argp->minorversion == 0)
1068 return nfs_ok;
1069 return nfserr_notsupp;
1070 }
1071
1072 static __be32
nfsd4_decode_read(struct nfsd4_compoundargs * argp,struct nfsd4_read * read)1073 nfsd4_decode_read(struct nfsd4_compoundargs *argp, struct nfsd4_read *read)
1074 {
1075 DECODE_HEAD;
1076
1077 status = nfsd4_decode_stateid(argp, &read->rd_stateid);
1078 if (status)
1079 return status;
1080 READ_BUF(12);
1081 p = xdr_decode_hyper(p, &read->rd_offset);
1082 read->rd_length = be32_to_cpup(p++);
1083
1084 DECODE_TAIL;
1085 }
1086
1087 static __be32
nfsd4_decode_readdir(struct nfsd4_compoundargs * argp,struct nfsd4_readdir * readdir)1088 nfsd4_decode_readdir(struct nfsd4_compoundargs *argp, struct nfsd4_readdir *readdir)
1089 {
1090 DECODE_HEAD;
1091
1092 READ_BUF(24);
1093 p = xdr_decode_hyper(p, &readdir->rd_cookie);
1094 COPYMEM(readdir->rd_verf.data, sizeof(readdir->rd_verf.data));
1095 readdir->rd_dircount = be32_to_cpup(p++);
1096 readdir->rd_maxcount = be32_to_cpup(p++);
1097 if ((status = nfsd4_decode_bitmap(argp, readdir->rd_bmval)))
1098 goto out;
1099
1100 DECODE_TAIL;
1101 }
1102
1103 static __be32
nfsd4_decode_remove(struct nfsd4_compoundargs * argp,struct nfsd4_remove * remove)1104 nfsd4_decode_remove(struct nfsd4_compoundargs *argp, struct nfsd4_remove *remove)
1105 {
1106 DECODE_HEAD;
1107
1108 READ_BUF(4);
1109 remove->rm_namelen = be32_to_cpup(p++);
1110 READ_BUF(remove->rm_namelen);
1111 SAVEMEM(remove->rm_name, remove->rm_namelen);
1112 if ((status = check_filename(remove->rm_name, remove->rm_namelen)))
1113 return status;
1114
1115 DECODE_TAIL;
1116 }
1117
1118 static __be32
nfsd4_decode_rename(struct nfsd4_compoundargs * argp,struct nfsd4_rename * rename)1119 nfsd4_decode_rename(struct nfsd4_compoundargs *argp, struct nfsd4_rename *rename)
1120 {
1121 DECODE_HEAD;
1122
1123 READ_BUF(4);
1124 rename->rn_snamelen = be32_to_cpup(p++);
1125 READ_BUF(rename->rn_snamelen);
1126 SAVEMEM(rename->rn_sname, rename->rn_snamelen);
1127 READ_BUF(4);
1128 rename->rn_tnamelen = be32_to_cpup(p++);
1129 READ_BUF(rename->rn_tnamelen);
1130 SAVEMEM(rename->rn_tname, rename->rn_tnamelen);
1131 if ((status = check_filename(rename->rn_sname, rename->rn_snamelen)))
1132 return status;
1133 if ((status = check_filename(rename->rn_tname, rename->rn_tnamelen)))
1134 return status;
1135
1136 DECODE_TAIL;
1137 }
1138
1139 static __be32
nfsd4_decode_renew(struct nfsd4_compoundargs * argp,clientid_t * clientid)1140 nfsd4_decode_renew(struct nfsd4_compoundargs *argp, clientid_t *clientid)
1141 {
1142 DECODE_HEAD;
1143
1144 if (argp->minorversion >= 1)
1145 return nfserr_notsupp;
1146
1147 READ_BUF(sizeof(clientid_t));
1148 COPYMEM(clientid, sizeof(clientid_t));
1149
1150 DECODE_TAIL;
1151 }
1152
1153 static __be32
nfsd4_decode_secinfo(struct nfsd4_compoundargs * argp,struct nfsd4_secinfo * secinfo)1154 nfsd4_decode_secinfo(struct nfsd4_compoundargs *argp,
1155 struct nfsd4_secinfo *secinfo)
1156 {
1157 DECODE_HEAD;
1158
1159 READ_BUF(4);
1160 secinfo->si_namelen = be32_to_cpup(p++);
1161 READ_BUF(secinfo->si_namelen);
1162 SAVEMEM(secinfo->si_name, secinfo->si_namelen);
1163 status = check_filename(secinfo->si_name, secinfo->si_namelen);
1164 if (status)
1165 return status;
1166 DECODE_TAIL;
1167 }
1168
1169 static __be32
nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs * argp,struct nfsd4_secinfo_no_name * sin)1170 nfsd4_decode_secinfo_no_name(struct nfsd4_compoundargs *argp,
1171 struct nfsd4_secinfo_no_name *sin)
1172 {
1173 DECODE_HEAD;
1174
1175 READ_BUF(4);
1176 sin->sin_style = be32_to_cpup(p++);
1177 DECODE_TAIL;
1178 }
1179
1180 static __be32
nfsd4_decode_setattr(struct nfsd4_compoundargs * argp,struct nfsd4_setattr * setattr)1181 nfsd4_decode_setattr(struct nfsd4_compoundargs *argp, struct nfsd4_setattr *setattr)
1182 {
1183 __be32 status;
1184
1185 status = nfsd4_decode_stateid(argp, &setattr->sa_stateid);
1186 if (status)
1187 return status;
1188 return nfsd4_decode_fattr(argp, setattr->sa_bmval, &setattr->sa_iattr,
1189 &setattr->sa_acl, &setattr->sa_label, NULL);
1190 }
1191
1192 static __be32
nfsd4_decode_setclientid(struct nfsd4_compoundargs * argp,struct nfsd4_setclientid * setclientid)1193 nfsd4_decode_setclientid(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid *setclientid)
1194 {
1195 DECODE_HEAD;
1196
1197 if (argp->minorversion >= 1)
1198 return nfserr_notsupp;
1199
1200 READ_BUF(NFS4_VERIFIER_SIZE);
1201 COPYMEM(setclientid->se_verf.data, NFS4_VERIFIER_SIZE);
1202
1203 status = nfsd4_decode_opaque(argp, &setclientid->se_name);
1204 if (status)
1205 return nfserr_bad_xdr;
1206 READ_BUF(8);
1207 setclientid->se_callback_prog = be32_to_cpup(p++);
1208 setclientid->se_callback_netid_len = be32_to_cpup(p++);
1209 READ_BUF(setclientid->se_callback_netid_len);
1210 SAVEMEM(setclientid->se_callback_netid_val, setclientid->se_callback_netid_len);
1211 READ_BUF(4);
1212 setclientid->se_callback_addr_len = be32_to_cpup(p++);
1213
1214 READ_BUF(setclientid->se_callback_addr_len);
1215 SAVEMEM(setclientid->se_callback_addr_val, setclientid->se_callback_addr_len);
1216 READ_BUF(4);
1217 setclientid->se_callback_ident = be32_to_cpup(p++);
1218
1219 DECODE_TAIL;
1220 }
1221
1222 static __be32
nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs * argp,struct nfsd4_setclientid_confirm * scd_c)1223 nfsd4_decode_setclientid_confirm(struct nfsd4_compoundargs *argp, struct nfsd4_setclientid_confirm *scd_c)
1224 {
1225 DECODE_HEAD;
1226
1227 if (argp->minorversion >= 1)
1228 return nfserr_notsupp;
1229
1230 READ_BUF(8 + NFS4_VERIFIER_SIZE);
1231 COPYMEM(&scd_c->sc_clientid, 8);
1232 COPYMEM(&scd_c->sc_confirm, NFS4_VERIFIER_SIZE);
1233
1234 DECODE_TAIL;
1235 }
1236
1237 /* Also used for NVERIFY */
1238 static __be32
nfsd4_decode_verify(struct nfsd4_compoundargs * argp,struct nfsd4_verify * verify)1239 nfsd4_decode_verify(struct nfsd4_compoundargs *argp, struct nfsd4_verify *verify)
1240 {
1241 DECODE_HEAD;
1242
1243 if ((status = nfsd4_decode_bitmap(argp, verify->ve_bmval)))
1244 goto out;
1245
1246 /* For convenience's sake, we compare raw xdr'd attributes in
1247 * nfsd4_proc_verify */
1248
1249 READ_BUF(4);
1250 verify->ve_attrlen = be32_to_cpup(p++);
1251 READ_BUF(verify->ve_attrlen);
1252 SAVEMEM(verify->ve_attrval, verify->ve_attrlen);
1253
1254 DECODE_TAIL;
1255 }
1256
1257 static __be32
nfsd4_decode_write(struct nfsd4_compoundargs * argp,struct nfsd4_write * write)1258 nfsd4_decode_write(struct nfsd4_compoundargs *argp, struct nfsd4_write *write)
1259 {
1260 int avail;
1261 int len;
1262 DECODE_HEAD;
1263
1264 status = nfsd4_decode_stateid(argp, &write->wr_stateid);
1265 if (status)
1266 return status;
1267 READ_BUF(16);
1268 p = xdr_decode_hyper(p, &write->wr_offset);
1269 write->wr_stable_how = be32_to_cpup(p++);
1270 if (write->wr_stable_how > NFS_FILE_SYNC)
1271 goto xdr_error;
1272 write->wr_buflen = be32_to_cpup(p++);
1273
1274 /* Sorry .. no magic macros for this.. *
1275 * READ_BUF(write->wr_buflen);
1276 * SAVEMEM(write->wr_buf, write->wr_buflen);
1277 */
1278 avail = (char*)argp->end - (char*)argp->p;
1279 if (avail + argp->pagelen < write->wr_buflen) {
1280 dprintk("NFSD: xdr error (%s:%d)\n",
1281 __FILE__, __LINE__);
1282 goto xdr_error;
1283 }
1284 write->wr_head.iov_base = p;
1285 write->wr_head.iov_len = avail;
1286 write->wr_pagelist = argp->pagelist;
1287
1288 len = XDR_QUADLEN(write->wr_buflen) << 2;
1289 if (len >= avail) {
1290 int pages;
1291
1292 len -= avail;
1293
1294 pages = len >> PAGE_SHIFT;
1295 argp->pagelist += pages;
1296 argp->pagelen -= pages * PAGE_SIZE;
1297 len -= pages * PAGE_SIZE;
1298
1299 next_decode_page(argp);
1300 }
1301 argp->p += XDR_QUADLEN(len);
1302
1303 DECODE_TAIL;
1304 }
1305
1306 static __be32
nfsd4_decode_release_lockowner(struct nfsd4_compoundargs * argp,struct nfsd4_release_lockowner * rlockowner)1307 nfsd4_decode_release_lockowner(struct nfsd4_compoundargs *argp, struct nfsd4_release_lockowner *rlockowner)
1308 {
1309 DECODE_HEAD;
1310
1311 if (argp->minorversion >= 1)
1312 return nfserr_notsupp;
1313
1314 READ_BUF(12);
1315 COPYMEM(&rlockowner->rl_clientid, sizeof(clientid_t));
1316 rlockowner->rl_owner.len = be32_to_cpup(p++);
1317 READ_BUF(rlockowner->rl_owner.len);
1318 READMEM(rlockowner->rl_owner.data, rlockowner->rl_owner.len);
1319
1320 if (argp->minorversion && !zero_clientid(&rlockowner->rl_clientid))
1321 return nfserr_inval;
1322 DECODE_TAIL;
1323 }
1324
1325 static __be32
nfsd4_decode_exchange_id(struct nfsd4_compoundargs * argp,struct nfsd4_exchange_id * exid)1326 nfsd4_decode_exchange_id(struct nfsd4_compoundargs *argp,
1327 struct nfsd4_exchange_id *exid)
1328 {
1329 int dummy, tmp;
1330 DECODE_HEAD;
1331
1332 READ_BUF(NFS4_VERIFIER_SIZE);
1333 COPYMEM(exid->verifier.data, NFS4_VERIFIER_SIZE);
1334
1335 status = nfsd4_decode_opaque(argp, &exid->clname);
1336 if (status)
1337 return nfserr_bad_xdr;
1338
1339 READ_BUF(4);
1340 exid->flags = be32_to_cpup(p++);
1341
1342 /* Ignore state_protect4_a */
1343 READ_BUF(4);
1344 exid->spa_how = be32_to_cpup(p++);
1345 switch (exid->spa_how) {
1346 case SP4_NONE:
1347 break;
1348 case SP4_MACH_CRED:
1349 /* spo_must_enforce */
1350 status = nfsd4_decode_bitmap(argp,
1351 exid->spo_must_enforce);
1352 if (status)
1353 goto out;
1354 /* spo_must_allow */
1355 status = nfsd4_decode_bitmap(argp, exid->spo_must_allow);
1356 if (status)
1357 goto out;
1358 break;
1359 case SP4_SSV:
1360 /* ssp_ops */
1361 READ_BUF(4);
1362 dummy = be32_to_cpup(p++);
1363 READ_BUF(dummy * 4);
1364 p += dummy;
1365
1366 READ_BUF(4);
1367 dummy = be32_to_cpup(p++);
1368 READ_BUF(dummy * 4);
1369 p += dummy;
1370
1371 /* ssp_hash_algs<> */
1372 READ_BUF(4);
1373 tmp = be32_to_cpup(p++);
1374 while (tmp--) {
1375 READ_BUF(4);
1376 dummy = be32_to_cpup(p++);
1377 READ_BUF(dummy);
1378 p += XDR_QUADLEN(dummy);
1379 }
1380
1381 /* ssp_encr_algs<> */
1382 READ_BUF(4);
1383 tmp = be32_to_cpup(p++);
1384 while (tmp--) {
1385 READ_BUF(4);
1386 dummy = be32_to_cpup(p++);
1387 READ_BUF(dummy);
1388 p += XDR_QUADLEN(dummy);
1389 }
1390
1391 /* ssp_window and ssp_num_gss_handles */
1392 READ_BUF(8);
1393 dummy = be32_to_cpup(p++);
1394 dummy = be32_to_cpup(p++);
1395 break;
1396 default:
1397 goto xdr_error;
1398 }
1399
1400 /* Ignore Implementation ID */
1401 READ_BUF(4); /* nfs_impl_id4 array length */
1402 dummy = be32_to_cpup(p++);
1403
1404 if (dummy > 1)
1405 goto xdr_error;
1406
1407 if (dummy == 1) {
1408 /* nii_domain */
1409 READ_BUF(4);
1410 dummy = be32_to_cpup(p++);
1411 READ_BUF(dummy);
1412 p += XDR_QUADLEN(dummy);
1413
1414 /* nii_name */
1415 READ_BUF(4);
1416 dummy = be32_to_cpup(p++);
1417 READ_BUF(dummy);
1418 p += XDR_QUADLEN(dummy);
1419
1420 /* nii_date */
1421 READ_BUF(12);
1422 p += 3;
1423 }
1424 DECODE_TAIL;
1425 }
1426
1427 static __be32
nfsd4_decode_create_session(struct nfsd4_compoundargs * argp,struct nfsd4_create_session * sess)1428 nfsd4_decode_create_session(struct nfsd4_compoundargs *argp,
1429 struct nfsd4_create_session *sess)
1430 {
1431 DECODE_HEAD;
1432 u32 dummy;
1433
1434 READ_BUF(16);
1435 COPYMEM(&sess->clientid, 8);
1436 sess->seqid = be32_to_cpup(p++);
1437 sess->flags = be32_to_cpup(p++);
1438
1439 /* Fore channel attrs */
1440 READ_BUF(28);
1441 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
1442 sess->fore_channel.maxreq_sz = be32_to_cpup(p++);
1443 sess->fore_channel.maxresp_sz = be32_to_cpup(p++);
1444 sess->fore_channel.maxresp_cached = be32_to_cpup(p++);
1445 sess->fore_channel.maxops = be32_to_cpup(p++);
1446 sess->fore_channel.maxreqs = be32_to_cpup(p++);
1447 sess->fore_channel.nr_rdma_attrs = be32_to_cpup(p++);
1448 if (sess->fore_channel.nr_rdma_attrs == 1) {
1449 READ_BUF(4);
1450 sess->fore_channel.rdma_attrs = be32_to_cpup(p++);
1451 } else if (sess->fore_channel.nr_rdma_attrs > 1) {
1452 dprintk("Too many fore channel attr bitmaps!\n");
1453 goto xdr_error;
1454 }
1455
1456 /* Back channel attrs */
1457 READ_BUF(28);
1458 dummy = be32_to_cpup(p++); /* headerpadsz is always 0 */
1459 sess->back_channel.maxreq_sz = be32_to_cpup(p++);
1460 sess->back_channel.maxresp_sz = be32_to_cpup(p++);
1461 sess->back_channel.maxresp_cached = be32_to_cpup(p++);
1462 sess->back_channel.maxops = be32_to_cpup(p++);
1463 sess->back_channel.maxreqs = be32_to_cpup(p++);
1464 sess->back_channel.nr_rdma_attrs = be32_to_cpup(p++);
1465 if (sess->back_channel.nr_rdma_attrs == 1) {
1466 READ_BUF(4);
1467 sess->back_channel.rdma_attrs = be32_to_cpup(p++);
1468 } else if (sess->back_channel.nr_rdma_attrs > 1) {
1469 dprintk("Too many back channel attr bitmaps!\n");
1470 goto xdr_error;
1471 }
1472
1473 READ_BUF(4);
1474 sess->callback_prog = be32_to_cpup(p++);
1475 nfsd4_decode_cb_sec(argp, &sess->cb_sec);
1476 DECODE_TAIL;
1477 }
1478
1479 static __be32
nfsd4_decode_destroy_session(struct nfsd4_compoundargs * argp,struct nfsd4_destroy_session * destroy_session)1480 nfsd4_decode_destroy_session(struct nfsd4_compoundargs *argp,
1481 struct nfsd4_destroy_session *destroy_session)
1482 {
1483 DECODE_HEAD;
1484 READ_BUF(NFS4_MAX_SESSIONID_LEN);
1485 COPYMEM(destroy_session->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1486
1487 DECODE_TAIL;
1488 }
1489
1490 static __be32
nfsd4_decode_free_stateid(struct nfsd4_compoundargs * argp,struct nfsd4_free_stateid * free_stateid)1491 nfsd4_decode_free_stateid(struct nfsd4_compoundargs *argp,
1492 struct nfsd4_free_stateid *free_stateid)
1493 {
1494 DECODE_HEAD;
1495
1496 READ_BUF(sizeof(stateid_t));
1497 free_stateid->fr_stateid.si_generation = be32_to_cpup(p++);
1498 COPYMEM(&free_stateid->fr_stateid.si_opaque, sizeof(stateid_opaque_t));
1499
1500 DECODE_TAIL;
1501 }
1502
1503 static __be32
nfsd4_decode_sequence(struct nfsd4_compoundargs * argp,struct nfsd4_sequence * seq)1504 nfsd4_decode_sequence(struct nfsd4_compoundargs *argp,
1505 struct nfsd4_sequence *seq)
1506 {
1507 DECODE_HEAD;
1508
1509 READ_BUF(NFS4_MAX_SESSIONID_LEN + 16);
1510 COPYMEM(seq->sessionid.data, NFS4_MAX_SESSIONID_LEN);
1511 seq->seqid = be32_to_cpup(p++);
1512 seq->slotid = be32_to_cpup(p++);
1513 seq->maxslots = be32_to_cpup(p++);
1514 seq->cachethis = be32_to_cpup(p++);
1515
1516 DECODE_TAIL;
1517 }
1518
1519 static __be32
nfsd4_decode_test_stateid(struct nfsd4_compoundargs * argp,struct nfsd4_test_stateid * test_stateid)1520 nfsd4_decode_test_stateid(struct nfsd4_compoundargs *argp, struct nfsd4_test_stateid *test_stateid)
1521 {
1522 int i;
1523 __be32 *p, status;
1524 struct nfsd4_test_stateid_id *stateid;
1525
1526 READ_BUF(4);
1527 test_stateid->ts_num_ids = ntohl(*p++);
1528
1529 INIT_LIST_HEAD(&test_stateid->ts_stateid_list);
1530
1531 for (i = 0; i < test_stateid->ts_num_ids; i++) {
1532 stateid = svcxdr_tmpalloc(argp, sizeof(*stateid));
1533 if (!stateid) {
1534 status = nfserrno(-ENOMEM);
1535 goto out;
1536 }
1537
1538 INIT_LIST_HEAD(&stateid->ts_id_list);
1539 list_add_tail(&stateid->ts_id_list, &test_stateid->ts_stateid_list);
1540
1541 status = nfsd4_decode_stateid(argp, &stateid->ts_id_stateid);
1542 if (status)
1543 goto out;
1544 }
1545
1546 status = 0;
1547 out:
1548 return status;
1549 xdr_error:
1550 dprintk("NFSD: xdr error (%s:%d)\n", __FILE__, __LINE__);
1551 status = nfserr_bad_xdr;
1552 goto out;
1553 }
1554
nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs * argp,struct nfsd4_destroy_clientid * dc)1555 static __be32 nfsd4_decode_destroy_clientid(struct nfsd4_compoundargs *argp, struct nfsd4_destroy_clientid *dc)
1556 {
1557 DECODE_HEAD;
1558
1559 READ_BUF(8);
1560 COPYMEM(&dc->clientid, 8);
1561
1562 DECODE_TAIL;
1563 }
1564
nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs * argp,struct nfsd4_reclaim_complete * rc)1565 static __be32 nfsd4_decode_reclaim_complete(struct nfsd4_compoundargs *argp, struct nfsd4_reclaim_complete *rc)
1566 {
1567 DECODE_HEAD;
1568
1569 READ_BUF(4);
1570 rc->rca_one_fs = be32_to_cpup(p++);
1571
1572 DECODE_TAIL;
1573 }
1574
1575 #ifdef CONFIG_NFSD_PNFS
1576 static __be32
nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs * argp,struct nfsd4_getdeviceinfo * gdev)1577 nfsd4_decode_getdeviceinfo(struct nfsd4_compoundargs *argp,
1578 struct nfsd4_getdeviceinfo *gdev)
1579 {
1580 DECODE_HEAD;
1581 u32 num, i;
1582
1583 READ_BUF(sizeof(struct nfsd4_deviceid) + 3 * 4);
1584 COPYMEM(&gdev->gd_devid, sizeof(struct nfsd4_deviceid));
1585 gdev->gd_layout_type = be32_to_cpup(p++);
1586 gdev->gd_maxcount = be32_to_cpup(p++);
1587 num = be32_to_cpup(p++);
1588 if (num) {
1589 if (num > 1000)
1590 goto xdr_error;
1591 READ_BUF(4 * num);
1592 gdev->gd_notify_types = be32_to_cpup(p++);
1593 for (i = 1; i < num; i++) {
1594 if (be32_to_cpup(p++)) {
1595 status = nfserr_inval;
1596 goto out;
1597 }
1598 }
1599 }
1600 DECODE_TAIL;
1601 }
1602
1603 static __be32
nfsd4_decode_layoutget(struct nfsd4_compoundargs * argp,struct nfsd4_layoutget * lgp)1604 nfsd4_decode_layoutget(struct nfsd4_compoundargs *argp,
1605 struct nfsd4_layoutget *lgp)
1606 {
1607 DECODE_HEAD;
1608
1609 READ_BUF(36);
1610 lgp->lg_signal = be32_to_cpup(p++);
1611 lgp->lg_layout_type = be32_to_cpup(p++);
1612 lgp->lg_seg.iomode = be32_to_cpup(p++);
1613 p = xdr_decode_hyper(p, &lgp->lg_seg.offset);
1614 p = xdr_decode_hyper(p, &lgp->lg_seg.length);
1615 p = xdr_decode_hyper(p, &lgp->lg_minlength);
1616
1617 status = nfsd4_decode_stateid(argp, &lgp->lg_sid);
1618 if (status)
1619 return status;
1620
1621 READ_BUF(4);
1622 lgp->lg_maxcount = be32_to_cpup(p++);
1623
1624 DECODE_TAIL;
1625 }
1626
1627 static __be32
nfsd4_decode_layoutcommit(struct nfsd4_compoundargs * argp,struct nfsd4_layoutcommit * lcp)1628 nfsd4_decode_layoutcommit(struct nfsd4_compoundargs *argp,
1629 struct nfsd4_layoutcommit *lcp)
1630 {
1631 DECODE_HEAD;
1632 u32 timechange;
1633
1634 READ_BUF(20);
1635 p = xdr_decode_hyper(p, &lcp->lc_seg.offset);
1636 p = xdr_decode_hyper(p, &lcp->lc_seg.length);
1637 lcp->lc_reclaim = be32_to_cpup(p++);
1638
1639 status = nfsd4_decode_stateid(argp, &lcp->lc_sid);
1640 if (status)
1641 return status;
1642
1643 READ_BUF(4);
1644 lcp->lc_newoffset = be32_to_cpup(p++);
1645 if (lcp->lc_newoffset) {
1646 READ_BUF(8);
1647 p = xdr_decode_hyper(p, &lcp->lc_last_wr);
1648 } else
1649 lcp->lc_last_wr = 0;
1650 READ_BUF(4);
1651 timechange = be32_to_cpup(p++);
1652 if (timechange) {
1653 status = nfsd4_decode_time(argp, &lcp->lc_mtime);
1654 if (status)
1655 return status;
1656 } else {
1657 lcp->lc_mtime.tv_nsec = UTIME_NOW;
1658 }
1659 READ_BUF(8);
1660 lcp->lc_layout_type = be32_to_cpup(p++);
1661
1662 /*
1663 * Save the layout update in XDR format and let the layout driver deal
1664 * with it later.
1665 */
1666 lcp->lc_up_len = be32_to_cpup(p++);
1667 if (lcp->lc_up_len > 0) {
1668 READ_BUF(lcp->lc_up_len);
1669 READMEM(lcp->lc_up_layout, lcp->lc_up_len);
1670 }
1671
1672 DECODE_TAIL;
1673 }
1674
1675 static __be32
nfsd4_decode_layoutreturn(struct nfsd4_compoundargs * argp,struct nfsd4_layoutreturn * lrp)1676 nfsd4_decode_layoutreturn(struct nfsd4_compoundargs *argp,
1677 struct nfsd4_layoutreturn *lrp)
1678 {
1679 DECODE_HEAD;
1680
1681 READ_BUF(16);
1682 lrp->lr_reclaim = be32_to_cpup(p++);
1683 lrp->lr_layout_type = be32_to_cpup(p++);
1684 lrp->lr_seg.iomode = be32_to_cpup(p++);
1685 lrp->lr_return_type = be32_to_cpup(p++);
1686 if (lrp->lr_return_type == RETURN_FILE) {
1687 READ_BUF(16);
1688 p = xdr_decode_hyper(p, &lrp->lr_seg.offset);
1689 p = xdr_decode_hyper(p, &lrp->lr_seg.length);
1690
1691 status = nfsd4_decode_stateid(argp, &lrp->lr_sid);
1692 if (status)
1693 return status;
1694
1695 READ_BUF(4);
1696 lrp->lrf_body_len = be32_to_cpup(p++);
1697 if (lrp->lrf_body_len > 0) {
1698 READ_BUF(lrp->lrf_body_len);
1699 READMEM(lrp->lrf_body, lrp->lrf_body_len);
1700 }
1701 } else {
1702 lrp->lr_seg.offset = 0;
1703 lrp->lr_seg.length = NFS4_MAX_UINT64;
1704 }
1705
1706 DECODE_TAIL;
1707 }
1708 #endif /* CONFIG_NFSD_PNFS */
1709
1710 static __be32
nfsd4_decode_fallocate(struct nfsd4_compoundargs * argp,struct nfsd4_fallocate * fallocate)1711 nfsd4_decode_fallocate(struct nfsd4_compoundargs *argp,
1712 struct nfsd4_fallocate *fallocate)
1713 {
1714 DECODE_HEAD;
1715
1716 status = nfsd4_decode_stateid(argp, &fallocate->falloc_stateid);
1717 if (status)
1718 return status;
1719
1720 READ_BUF(16);
1721 p = xdr_decode_hyper(p, &fallocate->falloc_offset);
1722 xdr_decode_hyper(p, &fallocate->falloc_length);
1723
1724 DECODE_TAIL;
1725 }
1726
1727 static __be32
nfsd4_decode_clone(struct nfsd4_compoundargs * argp,struct nfsd4_clone * clone)1728 nfsd4_decode_clone(struct nfsd4_compoundargs *argp, struct nfsd4_clone *clone)
1729 {
1730 DECODE_HEAD;
1731
1732 status = nfsd4_decode_stateid(argp, &clone->cl_src_stateid);
1733 if (status)
1734 return status;
1735 status = nfsd4_decode_stateid(argp, &clone->cl_dst_stateid);
1736 if (status)
1737 return status;
1738
1739 READ_BUF(8 + 8 + 8);
1740 p = xdr_decode_hyper(p, &clone->cl_src_pos);
1741 p = xdr_decode_hyper(p, &clone->cl_dst_pos);
1742 p = xdr_decode_hyper(p, &clone->cl_count);
1743 DECODE_TAIL;
1744 }
1745
1746 static __be32
nfsd4_decode_copy(struct nfsd4_compoundargs * argp,struct nfsd4_copy * copy)1747 nfsd4_decode_copy(struct nfsd4_compoundargs *argp, struct nfsd4_copy *copy)
1748 {
1749 DECODE_HEAD;
1750 unsigned int tmp;
1751
1752 status = nfsd4_decode_stateid(argp, ©->cp_src_stateid);
1753 if (status)
1754 return status;
1755 status = nfsd4_decode_stateid(argp, ©->cp_dst_stateid);
1756 if (status)
1757 return status;
1758
1759 READ_BUF(8 + 8 + 8 + 4 + 4 + 4);
1760 p = xdr_decode_hyper(p, ©->cp_src_pos);
1761 p = xdr_decode_hyper(p, ©->cp_dst_pos);
1762 p = xdr_decode_hyper(p, ©->cp_count);
1763 copy->cp_consecutive = be32_to_cpup(p++);
1764 copy->cp_synchronous = be32_to_cpup(p++);
1765 tmp = be32_to_cpup(p); /* Source server list not supported */
1766
1767 DECODE_TAIL;
1768 }
1769
1770 static __be32
nfsd4_decode_seek(struct nfsd4_compoundargs * argp,struct nfsd4_seek * seek)1771 nfsd4_decode_seek(struct nfsd4_compoundargs *argp, struct nfsd4_seek *seek)
1772 {
1773 DECODE_HEAD;
1774
1775 status = nfsd4_decode_stateid(argp, &seek->seek_stateid);
1776 if (status)
1777 return status;
1778
1779 READ_BUF(8 + 4);
1780 p = xdr_decode_hyper(p, &seek->seek_offset);
1781 seek->seek_whence = be32_to_cpup(p);
1782
1783 DECODE_TAIL;
1784 }
1785
1786 static __be32
nfsd4_decode_noop(struct nfsd4_compoundargs * argp,void * p)1787 nfsd4_decode_noop(struct nfsd4_compoundargs *argp, void *p)
1788 {
1789 return nfs_ok;
1790 }
1791
1792 static __be32
nfsd4_decode_notsupp(struct nfsd4_compoundargs * argp,void * p)1793 nfsd4_decode_notsupp(struct nfsd4_compoundargs *argp, void *p)
1794 {
1795 return nfserr_notsupp;
1796 }
1797
1798 typedef __be32(*nfsd4_dec)(struct nfsd4_compoundargs *argp, void *);
1799
1800 static const nfsd4_dec nfsd4_dec_ops[] = {
1801 [OP_ACCESS] = (nfsd4_dec)nfsd4_decode_access,
1802 [OP_CLOSE] = (nfsd4_dec)nfsd4_decode_close,
1803 [OP_COMMIT] = (nfsd4_dec)nfsd4_decode_commit,
1804 [OP_CREATE] = (nfsd4_dec)nfsd4_decode_create,
1805 [OP_DELEGPURGE] = (nfsd4_dec)nfsd4_decode_notsupp,
1806 [OP_DELEGRETURN] = (nfsd4_dec)nfsd4_decode_delegreturn,
1807 [OP_GETATTR] = (nfsd4_dec)nfsd4_decode_getattr,
1808 [OP_GETFH] = (nfsd4_dec)nfsd4_decode_noop,
1809 [OP_LINK] = (nfsd4_dec)nfsd4_decode_link,
1810 [OP_LOCK] = (nfsd4_dec)nfsd4_decode_lock,
1811 [OP_LOCKT] = (nfsd4_dec)nfsd4_decode_lockt,
1812 [OP_LOCKU] = (nfsd4_dec)nfsd4_decode_locku,
1813 [OP_LOOKUP] = (nfsd4_dec)nfsd4_decode_lookup,
1814 [OP_LOOKUPP] = (nfsd4_dec)nfsd4_decode_noop,
1815 [OP_NVERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1816 [OP_OPEN] = (nfsd4_dec)nfsd4_decode_open,
1817 [OP_OPENATTR] = (nfsd4_dec)nfsd4_decode_notsupp,
1818 [OP_OPEN_CONFIRM] = (nfsd4_dec)nfsd4_decode_open_confirm,
1819 [OP_OPEN_DOWNGRADE] = (nfsd4_dec)nfsd4_decode_open_downgrade,
1820 [OP_PUTFH] = (nfsd4_dec)nfsd4_decode_putfh,
1821 [OP_PUTPUBFH] = (nfsd4_dec)nfsd4_decode_putpubfh,
1822 [OP_PUTROOTFH] = (nfsd4_dec)nfsd4_decode_noop,
1823 [OP_READ] = (nfsd4_dec)nfsd4_decode_read,
1824 [OP_READDIR] = (nfsd4_dec)nfsd4_decode_readdir,
1825 [OP_READLINK] = (nfsd4_dec)nfsd4_decode_noop,
1826 [OP_REMOVE] = (nfsd4_dec)nfsd4_decode_remove,
1827 [OP_RENAME] = (nfsd4_dec)nfsd4_decode_rename,
1828 [OP_RENEW] = (nfsd4_dec)nfsd4_decode_renew,
1829 [OP_RESTOREFH] = (nfsd4_dec)nfsd4_decode_noop,
1830 [OP_SAVEFH] = (nfsd4_dec)nfsd4_decode_noop,
1831 [OP_SECINFO] = (nfsd4_dec)nfsd4_decode_secinfo,
1832 [OP_SETATTR] = (nfsd4_dec)nfsd4_decode_setattr,
1833 [OP_SETCLIENTID] = (nfsd4_dec)nfsd4_decode_setclientid,
1834 [OP_SETCLIENTID_CONFIRM] = (nfsd4_dec)nfsd4_decode_setclientid_confirm,
1835 [OP_VERIFY] = (nfsd4_dec)nfsd4_decode_verify,
1836 [OP_WRITE] = (nfsd4_dec)nfsd4_decode_write,
1837 [OP_RELEASE_LOCKOWNER] = (nfsd4_dec)nfsd4_decode_release_lockowner,
1838
1839 /* new operations for NFSv4.1 */
1840 [OP_BACKCHANNEL_CTL] = (nfsd4_dec)nfsd4_decode_backchannel_ctl,
1841 [OP_BIND_CONN_TO_SESSION]= (nfsd4_dec)nfsd4_decode_bind_conn_to_session,
1842 [OP_EXCHANGE_ID] = (nfsd4_dec)nfsd4_decode_exchange_id,
1843 [OP_CREATE_SESSION] = (nfsd4_dec)nfsd4_decode_create_session,
1844 [OP_DESTROY_SESSION] = (nfsd4_dec)nfsd4_decode_destroy_session,
1845 [OP_FREE_STATEID] = (nfsd4_dec)nfsd4_decode_free_stateid,
1846 [OP_GET_DIR_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1847 #ifdef CONFIG_NFSD_PNFS
1848 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_getdeviceinfo,
1849 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1850 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_layoutcommit,
1851 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_layoutget,
1852 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_layoutreturn,
1853 #else
1854 [OP_GETDEVICEINFO] = (nfsd4_dec)nfsd4_decode_notsupp,
1855 [OP_GETDEVICELIST] = (nfsd4_dec)nfsd4_decode_notsupp,
1856 [OP_LAYOUTCOMMIT] = (nfsd4_dec)nfsd4_decode_notsupp,
1857 [OP_LAYOUTGET] = (nfsd4_dec)nfsd4_decode_notsupp,
1858 [OP_LAYOUTRETURN] = (nfsd4_dec)nfsd4_decode_notsupp,
1859 #endif
1860 [OP_SECINFO_NO_NAME] = (nfsd4_dec)nfsd4_decode_secinfo_no_name,
1861 [OP_SEQUENCE] = (nfsd4_dec)nfsd4_decode_sequence,
1862 [OP_SET_SSV] = (nfsd4_dec)nfsd4_decode_notsupp,
1863 [OP_TEST_STATEID] = (nfsd4_dec)nfsd4_decode_test_stateid,
1864 [OP_WANT_DELEGATION] = (nfsd4_dec)nfsd4_decode_notsupp,
1865 [OP_DESTROY_CLIENTID] = (nfsd4_dec)nfsd4_decode_destroy_clientid,
1866 [OP_RECLAIM_COMPLETE] = (nfsd4_dec)nfsd4_decode_reclaim_complete,
1867
1868 /* new operations for NFSv4.2 */
1869 [OP_ALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
1870 [OP_COPY] = (nfsd4_dec)nfsd4_decode_copy,
1871 [OP_COPY_NOTIFY] = (nfsd4_dec)nfsd4_decode_notsupp,
1872 [OP_DEALLOCATE] = (nfsd4_dec)nfsd4_decode_fallocate,
1873 [OP_IO_ADVISE] = (nfsd4_dec)nfsd4_decode_notsupp,
1874 [OP_LAYOUTERROR] = (nfsd4_dec)nfsd4_decode_notsupp,
1875 [OP_LAYOUTSTATS] = (nfsd4_dec)nfsd4_decode_notsupp,
1876 [OP_OFFLOAD_CANCEL] = (nfsd4_dec)nfsd4_decode_notsupp,
1877 [OP_OFFLOAD_STATUS] = (nfsd4_dec)nfsd4_decode_notsupp,
1878 [OP_READ_PLUS] = (nfsd4_dec)nfsd4_decode_notsupp,
1879 [OP_SEEK] = (nfsd4_dec)nfsd4_decode_seek,
1880 [OP_WRITE_SAME] = (nfsd4_dec)nfsd4_decode_notsupp,
1881 [OP_CLONE] = (nfsd4_dec)nfsd4_decode_clone,
1882 };
1883
1884 static inline bool
nfsd4_opnum_in_range(struct nfsd4_compoundargs * argp,struct nfsd4_op * op)1885 nfsd4_opnum_in_range(struct nfsd4_compoundargs *argp, struct nfsd4_op *op)
1886 {
1887 if (op->opnum < FIRST_NFS4_OP)
1888 return false;
1889 else if (argp->minorversion == 0 && op->opnum > LAST_NFS40_OP)
1890 return false;
1891 else if (argp->minorversion == 1 && op->opnum > LAST_NFS41_OP)
1892 return false;
1893 else if (argp->minorversion == 2 && op->opnum > LAST_NFS42_OP)
1894 return false;
1895 return true;
1896 }
1897
1898 static __be32
nfsd4_decode_compound(struct nfsd4_compoundargs * argp)1899 nfsd4_decode_compound(struct nfsd4_compoundargs *argp)
1900 {
1901 DECODE_HEAD;
1902 struct nfsd4_op *op;
1903 bool cachethis = false;
1904 int auth_slack= argp->rqstp->rq_auth_slack;
1905 int max_reply = auth_slack + 8; /* opcnt, status */
1906 int readcount = 0;
1907 int readbytes = 0;
1908 int i;
1909
1910 READ_BUF(4);
1911 argp->taglen = be32_to_cpup(p++);
1912 READ_BUF(argp->taglen);
1913 SAVEMEM(argp->tag, argp->taglen);
1914 READ_BUF(8);
1915 argp->minorversion = be32_to_cpup(p++);
1916 argp->opcnt = be32_to_cpup(p++);
1917 max_reply += 4 + (XDR_QUADLEN(argp->taglen) << 2);
1918
1919 if (argp->taglen > NFSD4_MAX_TAGLEN)
1920 goto xdr_error;
1921 if (argp->opcnt > 100)
1922 goto xdr_error;
1923
1924 if (argp->opcnt > ARRAY_SIZE(argp->iops)) {
1925 argp->ops = kzalloc(argp->opcnt * sizeof(*argp->ops), GFP_KERNEL);
1926 if (!argp->ops) {
1927 argp->ops = argp->iops;
1928 dprintk("nfsd: couldn't allocate room for COMPOUND\n");
1929 goto xdr_error;
1930 }
1931 }
1932
1933 if (argp->minorversion > NFSD_SUPPORTED_MINOR_VERSION)
1934 argp->opcnt = 0;
1935
1936 for (i = 0; i < argp->opcnt; i++) {
1937 op = &argp->ops[i];
1938 op->replay = NULL;
1939
1940 READ_BUF(4);
1941 op->opnum = be32_to_cpup(p++);
1942
1943 if (nfsd4_opnum_in_range(argp, op))
1944 op->status = nfsd4_dec_ops[op->opnum](argp, &op->u);
1945 else {
1946 op->opnum = OP_ILLEGAL;
1947 op->status = nfserr_op_illegal;
1948 }
1949 op->opdesc = OPDESC(op);
1950 /*
1951 * We'll try to cache the result in the DRC if any one
1952 * op in the compound wants to be cached:
1953 */
1954 cachethis |= nfsd4_cache_this_op(op);
1955
1956 if (op->opnum == OP_READ) {
1957 readcount++;
1958 readbytes += nfsd4_max_reply(argp->rqstp, op);
1959 } else
1960 max_reply += nfsd4_max_reply(argp->rqstp, op);
1961 /*
1962 * OP_LOCK and OP_LOCKT may return a conflicting lock.
1963 * (Special case because it will just skip encoding this
1964 * if it runs out of xdr buffer space, and it is the only
1965 * operation that behaves this way.)
1966 */
1967 if (op->opnum == OP_LOCK || op->opnum == OP_LOCKT)
1968 max_reply += NFS4_OPAQUE_LIMIT;
1969
1970 if (op->status) {
1971 argp->opcnt = i+1;
1972 break;
1973 }
1974 }
1975 /* Sessions make the DRC unnecessary: */
1976 if (argp->minorversion)
1977 cachethis = false;
1978 svc_reserve(argp->rqstp, max_reply + readbytes);
1979 argp->rqstp->rq_cachetype = cachethis ? RC_REPLBUFF : RC_NOCACHE;
1980
1981 if (readcount > 1 || max_reply > PAGE_SIZE - auth_slack)
1982 clear_bit(RQ_SPLICE_OK, &argp->rqstp->rq_flags);
1983
1984 DECODE_TAIL;
1985 }
1986
encode_change(__be32 * p,struct kstat * stat,struct inode * inode,struct svc_export * exp)1987 static __be32 *encode_change(__be32 *p, struct kstat *stat, struct inode *inode,
1988 struct svc_export *exp)
1989 {
1990 if (exp->ex_flags & NFSEXP_V4ROOT) {
1991 *p++ = cpu_to_be32(convert_to_wallclock(exp->cd->flush_time));
1992 *p++ = 0;
1993 } else if (IS_I_VERSION(inode)) {
1994 p = xdr_encode_hyper(p, nfsd4_change_attribute(inode));
1995 } else {
1996 *p++ = cpu_to_be32(stat->ctime.tv_sec);
1997 *p++ = cpu_to_be32(stat->ctime.tv_nsec);
1998 }
1999 return p;
2000 }
2001
encode_cinfo(__be32 * p,struct nfsd4_change_info * c)2002 static __be32 *encode_cinfo(__be32 *p, struct nfsd4_change_info *c)
2003 {
2004 *p++ = cpu_to_be32(c->atomic);
2005 if (c->change_supported) {
2006 p = xdr_encode_hyper(p, c->before_change);
2007 p = xdr_encode_hyper(p, c->after_change);
2008 } else {
2009 *p++ = cpu_to_be32(c->before_ctime_sec);
2010 *p++ = cpu_to_be32(c->before_ctime_nsec);
2011 *p++ = cpu_to_be32(c->after_ctime_sec);
2012 *p++ = cpu_to_be32(c->after_ctime_nsec);
2013 }
2014 return p;
2015 }
2016
2017 /* Encode as an array of strings the string given with components
2018 * separated @sep, escaped with esc_enter and esc_exit.
2019 */
nfsd4_encode_components_esc(struct xdr_stream * xdr,char sep,char * components,char esc_enter,char esc_exit)2020 static __be32 nfsd4_encode_components_esc(struct xdr_stream *xdr, char sep,
2021 char *components, char esc_enter,
2022 char esc_exit)
2023 {
2024 __be32 *p;
2025 __be32 pathlen;
2026 int pathlen_offset;
2027 int strlen, count=0;
2028 char *str, *end, *next;
2029
2030 dprintk("nfsd4_encode_components(%s)\n", components);
2031
2032 pathlen_offset = xdr->buf->len;
2033 p = xdr_reserve_space(xdr, 4);
2034 if (!p)
2035 return nfserr_resource;
2036 p++; /* We will fill this in with @count later */
2037
2038 end = str = components;
2039 while (*end) {
2040 bool found_esc = false;
2041
2042 /* try to parse as esc_start, ..., esc_end, sep */
2043 if (*str == esc_enter) {
2044 for (; *end && (*end != esc_exit); end++)
2045 /* find esc_exit or end of string */;
2046 next = end + 1;
2047 if (*end && (!*next || *next == sep)) {
2048 str++;
2049 found_esc = true;
2050 }
2051 }
2052
2053 if (!found_esc)
2054 for (; *end && (*end != sep); end++)
2055 /* find sep or end of string */;
2056
2057 strlen = end - str;
2058 if (strlen) {
2059 p = xdr_reserve_space(xdr, strlen + 4);
2060 if (!p)
2061 return nfserr_resource;
2062 p = xdr_encode_opaque(p, str, strlen);
2063 count++;
2064 }
2065 else
2066 end++;
2067 if (found_esc)
2068 end = next;
2069
2070 str = end;
2071 }
2072 pathlen = htonl(count);
2073 write_bytes_to_xdr_buf(xdr->buf, pathlen_offset, &pathlen, 4);
2074 return 0;
2075 }
2076
2077 /* Encode as an array of strings the string given with components
2078 * separated @sep.
2079 */
nfsd4_encode_components(struct xdr_stream * xdr,char sep,char * components)2080 static __be32 nfsd4_encode_components(struct xdr_stream *xdr, char sep,
2081 char *components)
2082 {
2083 return nfsd4_encode_components_esc(xdr, sep, components, 0, 0);
2084 }
2085
2086 /*
2087 * encode a location element of a fs_locations structure
2088 */
nfsd4_encode_fs_location4(struct xdr_stream * xdr,struct nfsd4_fs_location * location)2089 static __be32 nfsd4_encode_fs_location4(struct xdr_stream *xdr,
2090 struct nfsd4_fs_location *location)
2091 {
2092 __be32 status;
2093
2094 status = nfsd4_encode_components_esc(xdr, ':', location->hosts,
2095 '[', ']');
2096 if (status)
2097 return status;
2098 status = nfsd4_encode_components(xdr, '/', location->path);
2099 if (status)
2100 return status;
2101 return 0;
2102 }
2103
2104 /*
2105 * Encode a path in RFC3530 'pathname4' format
2106 */
nfsd4_encode_path(struct xdr_stream * xdr,const struct path * root,const struct path * path)2107 static __be32 nfsd4_encode_path(struct xdr_stream *xdr,
2108 const struct path *root,
2109 const struct path *path)
2110 {
2111 struct path cur = *path;
2112 __be32 *p;
2113 struct dentry **components = NULL;
2114 unsigned int ncomponents = 0;
2115 __be32 err = nfserr_jukebox;
2116
2117 dprintk("nfsd4_encode_components(");
2118
2119 path_get(&cur);
2120 /* First walk the path up to the nfsd root, and store the
2121 * dentries/path components in an array.
2122 */
2123 for (;;) {
2124 if (path_equal(&cur, root))
2125 break;
2126 if (cur.dentry == cur.mnt->mnt_root) {
2127 if (follow_up(&cur))
2128 continue;
2129 goto out_free;
2130 }
2131 if ((ncomponents & 15) == 0) {
2132 struct dentry **new;
2133 new = krealloc(components,
2134 sizeof(*new) * (ncomponents + 16),
2135 GFP_KERNEL);
2136 if (!new)
2137 goto out_free;
2138 components = new;
2139 }
2140 components[ncomponents++] = cur.dentry;
2141 cur.dentry = dget_parent(cur.dentry);
2142 }
2143 err = nfserr_resource;
2144 p = xdr_reserve_space(xdr, 4);
2145 if (!p)
2146 goto out_free;
2147 *p++ = cpu_to_be32(ncomponents);
2148
2149 while (ncomponents) {
2150 struct dentry *dentry = components[ncomponents - 1];
2151 unsigned int len;
2152
2153 spin_lock(&dentry->d_lock);
2154 len = dentry->d_name.len;
2155 p = xdr_reserve_space(xdr, len + 4);
2156 if (!p) {
2157 spin_unlock(&dentry->d_lock);
2158 goto out_free;
2159 }
2160 p = xdr_encode_opaque(p, dentry->d_name.name, len);
2161 dprintk("/%pd", dentry);
2162 spin_unlock(&dentry->d_lock);
2163 dput(dentry);
2164 ncomponents--;
2165 }
2166
2167 err = 0;
2168 out_free:
2169 dprintk(")\n");
2170 while (ncomponents)
2171 dput(components[--ncomponents]);
2172 kfree(components);
2173 path_put(&cur);
2174 return err;
2175 }
2176
nfsd4_encode_fsloc_fsroot(struct xdr_stream * xdr,struct svc_rqst * rqstp,const struct path * path)2177 static __be32 nfsd4_encode_fsloc_fsroot(struct xdr_stream *xdr,
2178 struct svc_rqst *rqstp, const struct path *path)
2179 {
2180 struct svc_export *exp_ps;
2181 __be32 res;
2182
2183 exp_ps = rqst_find_fsidzero_export(rqstp);
2184 if (IS_ERR(exp_ps))
2185 return nfserrno(PTR_ERR(exp_ps));
2186 res = nfsd4_encode_path(xdr, &exp_ps->ex_path, path);
2187 exp_put(exp_ps);
2188 return res;
2189 }
2190
2191 /*
2192 * encode a fs_locations structure
2193 */
nfsd4_encode_fs_locations(struct xdr_stream * xdr,struct svc_rqst * rqstp,struct svc_export * exp)2194 static __be32 nfsd4_encode_fs_locations(struct xdr_stream *xdr,
2195 struct svc_rqst *rqstp, struct svc_export *exp)
2196 {
2197 __be32 status;
2198 int i;
2199 __be32 *p;
2200 struct nfsd4_fs_locations *fslocs = &exp->ex_fslocs;
2201
2202 status = nfsd4_encode_fsloc_fsroot(xdr, rqstp, &exp->ex_path);
2203 if (status)
2204 return status;
2205 p = xdr_reserve_space(xdr, 4);
2206 if (!p)
2207 return nfserr_resource;
2208 *p++ = cpu_to_be32(fslocs->locations_count);
2209 for (i=0; i<fslocs->locations_count; i++) {
2210 status = nfsd4_encode_fs_location4(xdr, &fslocs->locations[i]);
2211 if (status)
2212 return status;
2213 }
2214 return 0;
2215 }
2216
nfs4_file_type(umode_t mode)2217 static u32 nfs4_file_type(umode_t mode)
2218 {
2219 switch (mode & S_IFMT) {
2220 case S_IFIFO: return NF4FIFO;
2221 case S_IFCHR: return NF4CHR;
2222 case S_IFDIR: return NF4DIR;
2223 case S_IFBLK: return NF4BLK;
2224 case S_IFLNK: return NF4LNK;
2225 case S_IFREG: return NF4REG;
2226 case S_IFSOCK: return NF4SOCK;
2227 default: return NF4BAD;
2228 };
2229 }
2230
2231 static inline __be32
nfsd4_encode_aclname(struct xdr_stream * xdr,struct svc_rqst * rqstp,struct nfs4_ace * ace)2232 nfsd4_encode_aclname(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2233 struct nfs4_ace *ace)
2234 {
2235 if (ace->whotype != NFS4_ACL_WHO_NAMED)
2236 return nfs4_acl_write_who(xdr, ace->whotype);
2237 else if (ace->flag & NFS4_ACE_IDENTIFIER_GROUP)
2238 return nfsd4_encode_group(xdr, rqstp, ace->who_gid);
2239 else
2240 return nfsd4_encode_user(xdr, rqstp, ace->who_uid);
2241 }
2242
2243 static inline __be32
nfsd4_encode_layout_types(struct xdr_stream * xdr,u32 layout_types)2244 nfsd4_encode_layout_types(struct xdr_stream *xdr, u32 layout_types)
2245 {
2246 __be32 *p;
2247 unsigned long i = hweight_long(layout_types);
2248
2249 p = xdr_reserve_space(xdr, 4 + 4 * i);
2250 if (!p)
2251 return nfserr_resource;
2252
2253 *p++ = cpu_to_be32(i);
2254
2255 for (i = LAYOUT_NFSV4_1_FILES; i < LAYOUT_TYPE_MAX; ++i)
2256 if (layout_types & (1 << i))
2257 *p++ = cpu_to_be32(i);
2258
2259 return 0;
2260 }
2261
2262 #define WORD0_ABSENT_FS_ATTRS (FATTR4_WORD0_FS_LOCATIONS | FATTR4_WORD0_FSID | \
2263 FATTR4_WORD0_RDATTR_ERROR)
2264 #define WORD1_ABSENT_FS_ATTRS FATTR4_WORD1_MOUNTED_ON_FILEID
2265 #define WORD2_ABSENT_FS_ATTRS 0
2266
2267 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2268 static inline __be32
nfsd4_encode_security_label(struct xdr_stream * xdr,struct svc_rqst * rqstp,void * context,int len)2269 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2270 void *context, int len)
2271 {
2272 __be32 *p;
2273
2274 p = xdr_reserve_space(xdr, len + 4 + 4 + 4);
2275 if (!p)
2276 return nfserr_resource;
2277
2278 /*
2279 * For now we use a 0 here to indicate the null translation; in
2280 * the future we may place a call to translation code here.
2281 */
2282 *p++ = cpu_to_be32(0); /* lfs */
2283 *p++ = cpu_to_be32(0); /* pi */
2284 p = xdr_encode_opaque(p, context, len);
2285 return 0;
2286 }
2287 #else
2288 static inline __be32
nfsd4_encode_security_label(struct xdr_stream * xdr,struct svc_rqst * rqstp,void * context,int len)2289 nfsd4_encode_security_label(struct xdr_stream *xdr, struct svc_rqst *rqstp,
2290 void *context, int len)
2291 { return 0; }
2292 #endif
2293
fattr_handle_absent_fs(u32 * bmval0,u32 * bmval1,u32 * bmval2,u32 * rdattr_err)2294 static __be32 fattr_handle_absent_fs(u32 *bmval0, u32 *bmval1, u32 *bmval2, u32 *rdattr_err)
2295 {
2296 /* As per referral draft: */
2297 if (*bmval0 & ~WORD0_ABSENT_FS_ATTRS ||
2298 *bmval1 & ~WORD1_ABSENT_FS_ATTRS) {
2299 if (*bmval0 & FATTR4_WORD0_RDATTR_ERROR ||
2300 *bmval0 & FATTR4_WORD0_FS_LOCATIONS)
2301 *rdattr_err = NFSERR_MOVED;
2302 else
2303 return nfserr_moved;
2304 }
2305 *bmval0 &= WORD0_ABSENT_FS_ATTRS;
2306 *bmval1 &= WORD1_ABSENT_FS_ATTRS;
2307 *bmval2 &= WORD2_ABSENT_FS_ATTRS;
2308 return 0;
2309 }
2310
2311
get_parent_attributes(struct svc_export * exp,struct kstat * stat)2312 static int get_parent_attributes(struct svc_export *exp, struct kstat *stat)
2313 {
2314 struct path path = exp->ex_path;
2315 int err;
2316
2317 path_get(&path);
2318 while (follow_up(&path)) {
2319 if (path.dentry != path.mnt->mnt_root)
2320 break;
2321 }
2322 err = vfs_getattr(&path, stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
2323 path_put(&path);
2324 return err;
2325 }
2326
2327 static __be32
nfsd4_encode_bitmap(struct xdr_stream * xdr,u32 bmval0,u32 bmval1,u32 bmval2)2328 nfsd4_encode_bitmap(struct xdr_stream *xdr, u32 bmval0, u32 bmval1, u32 bmval2)
2329 {
2330 __be32 *p;
2331
2332 if (bmval2) {
2333 p = xdr_reserve_space(xdr, 16);
2334 if (!p)
2335 goto out_resource;
2336 *p++ = cpu_to_be32(3);
2337 *p++ = cpu_to_be32(bmval0);
2338 *p++ = cpu_to_be32(bmval1);
2339 *p++ = cpu_to_be32(bmval2);
2340 } else if (bmval1) {
2341 p = xdr_reserve_space(xdr, 12);
2342 if (!p)
2343 goto out_resource;
2344 *p++ = cpu_to_be32(2);
2345 *p++ = cpu_to_be32(bmval0);
2346 *p++ = cpu_to_be32(bmval1);
2347 } else {
2348 p = xdr_reserve_space(xdr, 8);
2349 if (!p)
2350 goto out_resource;
2351 *p++ = cpu_to_be32(1);
2352 *p++ = cpu_to_be32(bmval0);
2353 }
2354
2355 return 0;
2356 out_resource:
2357 return nfserr_resource;
2358 }
2359
2360 /*
2361 * Note: @fhp can be NULL; in this case, we might have to compose the filehandle
2362 * ourselves.
2363 */
2364 static __be32
nfsd4_encode_fattr(struct xdr_stream * xdr,struct svc_fh * fhp,struct svc_export * exp,struct dentry * dentry,u32 * bmval,struct svc_rqst * rqstp,int ignore_crossmnt)2365 nfsd4_encode_fattr(struct xdr_stream *xdr, struct svc_fh *fhp,
2366 struct svc_export *exp,
2367 struct dentry *dentry, u32 *bmval,
2368 struct svc_rqst *rqstp, int ignore_crossmnt)
2369 {
2370 u32 bmval0 = bmval[0];
2371 u32 bmval1 = bmval[1];
2372 u32 bmval2 = bmval[2];
2373 struct kstat stat;
2374 struct svc_fh *tempfh = NULL;
2375 struct kstatfs statfs;
2376 __be32 *p;
2377 int starting_len = xdr->buf->len;
2378 int attrlen_offset;
2379 __be32 attrlen;
2380 u32 dummy;
2381 u64 dummy64;
2382 u32 rdattr_err = 0;
2383 __be32 status;
2384 int err;
2385 struct nfs4_acl *acl = NULL;
2386 void *context = NULL;
2387 int contextlen;
2388 bool contextsupport = false;
2389 struct nfsd4_compoundres *resp = rqstp->rq_resp;
2390 u32 minorversion = resp->cstate.minorversion;
2391 struct path path = {
2392 .mnt = exp->ex_path.mnt,
2393 .dentry = dentry,
2394 };
2395 struct nfsd_net *nn = net_generic(SVC_NET(rqstp), nfsd_net_id);
2396
2397 BUG_ON(bmval1 & NFSD_WRITEONLY_ATTRS_WORD1);
2398 BUG_ON(!nfsd_attrs_supported(minorversion, bmval));
2399
2400 if (exp->ex_fslocs.migrated) {
2401 status = fattr_handle_absent_fs(&bmval0, &bmval1, &bmval2, &rdattr_err);
2402 if (status)
2403 goto out;
2404 }
2405
2406 err = vfs_getattr(&path, &stat, STATX_BASIC_STATS, AT_STATX_SYNC_AS_STAT);
2407 if (err)
2408 goto out_nfserr;
2409 if ((bmval0 & (FATTR4_WORD0_FILES_AVAIL | FATTR4_WORD0_FILES_FREE |
2410 FATTR4_WORD0_FILES_TOTAL | FATTR4_WORD0_MAXNAME)) ||
2411 (bmval1 & (FATTR4_WORD1_SPACE_AVAIL | FATTR4_WORD1_SPACE_FREE |
2412 FATTR4_WORD1_SPACE_TOTAL))) {
2413 err = vfs_statfs(&path, &statfs);
2414 if (err)
2415 goto out_nfserr;
2416 }
2417 if ((bmval0 & (FATTR4_WORD0_FILEHANDLE | FATTR4_WORD0_FSID)) && !fhp) {
2418 tempfh = kmalloc(sizeof(struct svc_fh), GFP_KERNEL);
2419 status = nfserr_jukebox;
2420 if (!tempfh)
2421 goto out;
2422 fh_init(tempfh, NFS4_FHSIZE);
2423 status = fh_compose(tempfh, exp, dentry, NULL);
2424 if (status)
2425 goto out;
2426 fhp = tempfh;
2427 }
2428 if (bmval0 & FATTR4_WORD0_ACL) {
2429 err = nfsd4_get_nfs4_acl(rqstp, dentry, &acl);
2430 if (err == -EOPNOTSUPP)
2431 bmval0 &= ~FATTR4_WORD0_ACL;
2432 else if (err == -EINVAL) {
2433 status = nfserr_attrnotsupp;
2434 goto out;
2435 } else if (err != 0)
2436 goto out_nfserr;
2437 }
2438
2439 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2440 if ((bmval2 & FATTR4_WORD2_SECURITY_LABEL) ||
2441 bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2442 if (exp->ex_flags & NFSEXP_SECURITY_LABEL)
2443 err = security_inode_getsecctx(d_inode(dentry),
2444 &context, &contextlen);
2445 else
2446 err = -EOPNOTSUPP;
2447 contextsupport = (err == 0);
2448 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
2449 if (err == -EOPNOTSUPP)
2450 bmval2 &= ~FATTR4_WORD2_SECURITY_LABEL;
2451 else if (err)
2452 goto out_nfserr;
2453 }
2454 }
2455 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
2456
2457 status = nfsd4_encode_bitmap(xdr, bmval0, bmval1, bmval2);
2458 if (status)
2459 goto out;
2460
2461 attrlen_offset = xdr->buf->len;
2462 p = xdr_reserve_space(xdr, 4);
2463 if (!p)
2464 goto out_resource;
2465 p++; /* to be backfilled later */
2466
2467 if (bmval0 & FATTR4_WORD0_SUPPORTED_ATTRS) {
2468 u32 supp[3];
2469
2470 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
2471
2472 if (!IS_POSIXACL(dentry->d_inode))
2473 supp[0] &= ~FATTR4_WORD0_ACL;
2474 if (!contextsupport)
2475 supp[2] &= ~FATTR4_WORD2_SECURITY_LABEL;
2476 if (!supp[2]) {
2477 p = xdr_reserve_space(xdr, 12);
2478 if (!p)
2479 goto out_resource;
2480 *p++ = cpu_to_be32(2);
2481 *p++ = cpu_to_be32(supp[0]);
2482 *p++ = cpu_to_be32(supp[1]);
2483 } else {
2484 p = xdr_reserve_space(xdr, 16);
2485 if (!p)
2486 goto out_resource;
2487 *p++ = cpu_to_be32(3);
2488 *p++ = cpu_to_be32(supp[0]);
2489 *p++ = cpu_to_be32(supp[1]);
2490 *p++ = cpu_to_be32(supp[2]);
2491 }
2492 }
2493 if (bmval0 & FATTR4_WORD0_TYPE) {
2494 p = xdr_reserve_space(xdr, 4);
2495 if (!p)
2496 goto out_resource;
2497 dummy = nfs4_file_type(stat.mode);
2498 if (dummy == NF4BAD) {
2499 status = nfserr_serverfault;
2500 goto out;
2501 }
2502 *p++ = cpu_to_be32(dummy);
2503 }
2504 if (bmval0 & FATTR4_WORD0_FH_EXPIRE_TYPE) {
2505 p = xdr_reserve_space(xdr, 4);
2506 if (!p)
2507 goto out_resource;
2508 if (exp->ex_flags & NFSEXP_NOSUBTREECHECK)
2509 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT);
2510 else
2511 *p++ = cpu_to_be32(NFS4_FH_PERSISTENT|
2512 NFS4_FH_VOL_RENAME);
2513 }
2514 if (bmval0 & FATTR4_WORD0_CHANGE) {
2515 p = xdr_reserve_space(xdr, 8);
2516 if (!p)
2517 goto out_resource;
2518 p = encode_change(p, &stat, d_inode(dentry), exp);
2519 }
2520 if (bmval0 & FATTR4_WORD0_SIZE) {
2521 p = xdr_reserve_space(xdr, 8);
2522 if (!p)
2523 goto out_resource;
2524 p = xdr_encode_hyper(p, stat.size);
2525 }
2526 if (bmval0 & FATTR4_WORD0_LINK_SUPPORT) {
2527 p = xdr_reserve_space(xdr, 4);
2528 if (!p)
2529 goto out_resource;
2530 *p++ = cpu_to_be32(1);
2531 }
2532 if (bmval0 & FATTR4_WORD0_SYMLINK_SUPPORT) {
2533 p = xdr_reserve_space(xdr, 4);
2534 if (!p)
2535 goto out_resource;
2536 *p++ = cpu_to_be32(1);
2537 }
2538 if (bmval0 & FATTR4_WORD0_NAMED_ATTR) {
2539 p = xdr_reserve_space(xdr, 4);
2540 if (!p)
2541 goto out_resource;
2542 *p++ = cpu_to_be32(0);
2543 }
2544 if (bmval0 & FATTR4_WORD0_FSID) {
2545 p = xdr_reserve_space(xdr, 16);
2546 if (!p)
2547 goto out_resource;
2548 if (exp->ex_fslocs.migrated) {
2549 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MAJOR);
2550 p = xdr_encode_hyper(p, NFS4_REFERRAL_FSID_MINOR);
2551 } else switch(fsid_source(fhp)) {
2552 case FSIDSOURCE_FSID:
2553 p = xdr_encode_hyper(p, (u64)exp->ex_fsid);
2554 p = xdr_encode_hyper(p, (u64)0);
2555 break;
2556 case FSIDSOURCE_DEV:
2557 *p++ = cpu_to_be32(0);
2558 *p++ = cpu_to_be32(MAJOR(stat.dev));
2559 *p++ = cpu_to_be32(0);
2560 *p++ = cpu_to_be32(MINOR(stat.dev));
2561 break;
2562 case FSIDSOURCE_UUID:
2563 p = xdr_encode_opaque_fixed(p, exp->ex_uuid,
2564 EX_UUID_LEN);
2565 break;
2566 }
2567 }
2568 if (bmval0 & FATTR4_WORD0_UNIQUE_HANDLES) {
2569 p = xdr_reserve_space(xdr, 4);
2570 if (!p)
2571 goto out_resource;
2572 *p++ = cpu_to_be32(0);
2573 }
2574 if (bmval0 & FATTR4_WORD0_LEASE_TIME) {
2575 p = xdr_reserve_space(xdr, 4);
2576 if (!p)
2577 goto out_resource;
2578 *p++ = cpu_to_be32(nn->nfsd4_lease);
2579 }
2580 if (bmval0 & FATTR4_WORD0_RDATTR_ERROR) {
2581 p = xdr_reserve_space(xdr, 4);
2582 if (!p)
2583 goto out_resource;
2584 *p++ = cpu_to_be32(rdattr_err);
2585 }
2586 if (bmval0 & FATTR4_WORD0_ACL) {
2587 struct nfs4_ace *ace;
2588
2589 if (acl == NULL) {
2590 p = xdr_reserve_space(xdr, 4);
2591 if (!p)
2592 goto out_resource;
2593
2594 *p++ = cpu_to_be32(0);
2595 goto out_acl;
2596 }
2597 p = xdr_reserve_space(xdr, 4);
2598 if (!p)
2599 goto out_resource;
2600 *p++ = cpu_to_be32(acl->naces);
2601
2602 for (ace = acl->aces; ace < acl->aces + acl->naces; ace++) {
2603 p = xdr_reserve_space(xdr, 4*3);
2604 if (!p)
2605 goto out_resource;
2606 *p++ = cpu_to_be32(ace->type);
2607 *p++ = cpu_to_be32(ace->flag);
2608 *p++ = cpu_to_be32(ace->access_mask &
2609 NFS4_ACE_MASK_ALL);
2610 status = nfsd4_encode_aclname(xdr, rqstp, ace);
2611 if (status)
2612 goto out;
2613 }
2614 }
2615 out_acl:
2616 if (bmval0 & FATTR4_WORD0_ACLSUPPORT) {
2617 p = xdr_reserve_space(xdr, 4);
2618 if (!p)
2619 goto out_resource;
2620 *p++ = cpu_to_be32(IS_POSIXACL(dentry->d_inode) ?
2621 ACL4_SUPPORT_ALLOW_ACL|ACL4_SUPPORT_DENY_ACL : 0);
2622 }
2623 if (bmval0 & FATTR4_WORD0_CANSETTIME) {
2624 p = xdr_reserve_space(xdr, 4);
2625 if (!p)
2626 goto out_resource;
2627 *p++ = cpu_to_be32(1);
2628 }
2629 if (bmval0 & FATTR4_WORD0_CASE_INSENSITIVE) {
2630 p = xdr_reserve_space(xdr, 4);
2631 if (!p)
2632 goto out_resource;
2633 *p++ = cpu_to_be32(0);
2634 }
2635 if (bmval0 & FATTR4_WORD0_CASE_PRESERVING) {
2636 p = xdr_reserve_space(xdr, 4);
2637 if (!p)
2638 goto out_resource;
2639 *p++ = cpu_to_be32(1);
2640 }
2641 if (bmval0 & FATTR4_WORD0_CHOWN_RESTRICTED) {
2642 p = xdr_reserve_space(xdr, 4);
2643 if (!p)
2644 goto out_resource;
2645 *p++ = cpu_to_be32(1);
2646 }
2647 if (bmval0 & FATTR4_WORD0_FILEHANDLE) {
2648 p = xdr_reserve_space(xdr, fhp->fh_handle.fh_size + 4);
2649 if (!p)
2650 goto out_resource;
2651 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base,
2652 fhp->fh_handle.fh_size);
2653 }
2654 if (bmval0 & FATTR4_WORD0_FILEID) {
2655 p = xdr_reserve_space(xdr, 8);
2656 if (!p)
2657 goto out_resource;
2658 p = xdr_encode_hyper(p, stat.ino);
2659 }
2660 if (bmval0 & FATTR4_WORD0_FILES_AVAIL) {
2661 p = xdr_reserve_space(xdr, 8);
2662 if (!p)
2663 goto out_resource;
2664 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
2665 }
2666 if (bmval0 & FATTR4_WORD0_FILES_FREE) {
2667 p = xdr_reserve_space(xdr, 8);
2668 if (!p)
2669 goto out_resource;
2670 p = xdr_encode_hyper(p, (u64) statfs.f_ffree);
2671 }
2672 if (bmval0 & FATTR4_WORD0_FILES_TOTAL) {
2673 p = xdr_reserve_space(xdr, 8);
2674 if (!p)
2675 goto out_resource;
2676 p = xdr_encode_hyper(p, (u64) statfs.f_files);
2677 }
2678 if (bmval0 & FATTR4_WORD0_FS_LOCATIONS) {
2679 status = nfsd4_encode_fs_locations(xdr, rqstp, exp);
2680 if (status)
2681 goto out;
2682 }
2683 if (bmval0 & FATTR4_WORD0_HOMOGENEOUS) {
2684 p = xdr_reserve_space(xdr, 4);
2685 if (!p)
2686 goto out_resource;
2687 *p++ = cpu_to_be32(1);
2688 }
2689 if (bmval0 & FATTR4_WORD0_MAXFILESIZE) {
2690 p = xdr_reserve_space(xdr, 8);
2691 if (!p)
2692 goto out_resource;
2693 p = xdr_encode_hyper(p, exp->ex_path.mnt->mnt_sb->s_maxbytes);
2694 }
2695 if (bmval0 & FATTR4_WORD0_MAXLINK) {
2696 p = xdr_reserve_space(xdr, 4);
2697 if (!p)
2698 goto out_resource;
2699 *p++ = cpu_to_be32(255);
2700 }
2701 if (bmval0 & FATTR4_WORD0_MAXNAME) {
2702 p = xdr_reserve_space(xdr, 4);
2703 if (!p)
2704 goto out_resource;
2705 *p++ = cpu_to_be32(statfs.f_namelen);
2706 }
2707 if (bmval0 & FATTR4_WORD0_MAXREAD) {
2708 p = xdr_reserve_space(xdr, 8);
2709 if (!p)
2710 goto out_resource;
2711 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
2712 }
2713 if (bmval0 & FATTR4_WORD0_MAXWRITE) {
2714 p = xdr_reserve_space(xdr, 8);
2715 if (!p)
2716 goto out_resource;
2717 p = xdr_encode_hyper(p, (u64) svc_max_payload(rqstp));
2718 }
2719 if (bmval1 & FATTR4_WORD1_MODE) {
2720 p = xdr_reserve_space(xdr, 4);
2721 if (!p)
2722 goto out_resource;
2723 *p++ = cpu_to_be32(stat.mode & S_IALLUGO);
2724 }
2725 if (bmval1 & FATTR4_WORD1_NO_TRUNC) {
2726 p = xdr_reserve_space(xdr, 4);
2727 if (!p)
2728 goto out_resource;
2729 *p++ = cpu_to_be32(1);
2730 }
2731 if (bmval1 & FATTR4_WORD1_NUMLINKS) {
2732 p = xdr_reserve_space(xdr, 4);
2733 if (!p)
2734 goto out_resource;
2735 *p++ = cpu_to_be32(stat.nlink);
2736 }
2737 if (bmval1 & FATTR4_WORD1_OWNER) {
2738 status = nfsd4_encode_user(xdr, rqstp, stat.uid);
2739 if (status)
2740 goto out;
2741 }
2742 if (bmval1 & FATTR4_WORD1_OWNER_GROUP) {
2743 status = nfsd4_encode_group(xdr, rqstp, stat.gid);
2744 if (status)
2745 goto out;
2746 }
2747 if (bmval1 & FATTR4_WORD1_RAWDEV) {
2748 p = xdr_reserve_space(xdr, 8);
2749 if (!p)
2750 goto out_resource;
2751 *p++ = cpu_to_be32((u32) MAJOR(stat.rdev));
2752 *p++ = cpu_to_be32((u32) MINOR(stat.rdev));
2753 }
2754 if (bmval1 & FATTR4_WORD1_SPACE_AVAIL) {
2755 p = xdr_reserve_space(xdr, 8);
2756 if (!p)
2757 goto out_resource;
2758 dummy64 = (u64)statfs.f_bavail * (u64)statfs.f_bsize;
2759 p = xdr_encode_hyper(p, dummy64);
2760 }
2761 if (bmval1 & FATTR4_WORD1_SPACE_FREE) {
2762 p = xdr_reserve_space(xdr, 8);
2763 if (!p)
2764 goto out_resource;
2765 dummy64 = (u64)statfs.f_bfree * (u64)statfs.f_bsize;
2766 p = xdr_encode_hyper(p, dummy64);
2767 }
2768 if (bmval1 & FATTR4_WORD1_SPACE_TOTAL) {
2769 p = xdr_reserve_space(xdr, 8);
2770 if (!p)
2771 goto out_resource;
2772 dummy64 = (u64)statfs.f_blocks * (u64)statfs.f_bsize;
2773 p = xdr_encode_hyper(p, dummy64);
2774 }
2775 if (bmval1 & FATTR4_WORD1_SPACE_USED) {
2776 p = xdr_reserve_space(xdr, 8);
2777 if (!p)
2778 goto out_resource;
2779 dummy64 = (u64)stat.blocks << 9;
2780 p = xdr_encode_hyper(p, dummy64);
2781 }
2782 if (bmval1 & FATTR4_WORD1_TIME_ACCESS) {
2783 p = xdr_reserve_space(xdr, 12);
2784 if (!p)
2785 goto out_resource;
2786 p = xdr_encode_hyper(p, (s64)stat.atime.tv_sec);
2787 *p++ = cpu_to_be32(stat.atime.tv_nsec);
2788 }
2789 if (bmval1 & FATTR4_WORD1_TIME_DELTA) {
2790 p = xdr_reserve_space(xdr, 12);
2791 if (!p)
2792 goto out_resource;
2793 *p++ = cpu_to_be32(0);
2794 *p++ = cpu_to_be32(1);
2795 *p++ = cpu_to_be32(0);
2796 }
2797 if (bmval1 & FATTR4_WORD1_TIME_METADATA) {
2798 p = xdr_reserve_space(xdr, 12);
2799 if (!p)
2800 goto out_resource;
2801 p = xdr_encode_hyper(p, (s64)stat.ctime.tv_sec);
2802 *p++ = cpu_to_be32(stat.ctime.tv_nsec);
2803 }
2804 if (bmval1 & FATTR4_WORD1_TIME_MODIFY) {
2805 p = xdr_reserve_space(xdr, 12);
2806 if (!p)
2807 goto out_resource;
2808 p = xdr_encode_hyper(p, (s64)stat.mtime.tv_sec);
2809 *p++ = cpu_to_be32(stat.mtime.tv_nsec);
2810 }
2811 if (bmval1 & FATTR4_WORD1_MOUNTED_ON_FILEID) {
2812 struct kstat parent_stat;
2813 u64 ino = stat.ino;
2814
2815 p = xdr_reserve_space(xdr, 8);
2816 if (!p)
2817 goto out_resource;
2818 /*
2819 * Get parent's attributes if not ignoring crossmount
2820 * and this is the root of a cross-mounted filesystem.
2821 */
2822 if (ignore_crossmnt == 0 &&
2823 dentry == exp->ex_path.mnt->mnt_root) {
2824 err = get_parent_attributes(exp, &parent_stat);
2825 if (err)
2826 goto out_nfserr;
2827 ino = parent_stat.ino;
2828 }
2829 p = xdr_encode_hyper(p, ino);
2830 }
2831 #ifdef CONFIG_NFSD_PNFS
2832 if (bmval1 & FATTR4_WORD1_FS_LAYOUT_TYPES) {
2833 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
2834 if (status)
2835 goto out;
2836 }
2837
2838 if (bmval2 & FATTR4_WORD2_LAYOUT_TYPES) {
2839 status = nfsd4_encode_layout_types(xdr, exp->ex_layout_types);
2840 if (status)
2841 goto out;
2842 }
2843
2844 if (bmval2 & FATTR4_WORD2_LAYOUT_BLKSIZE) {
2845 p = xdr_reserve_space(xdr, 4);
2846 if (!p)
2847 goto out_resource;
2848 *p++ = cpu_to_be32(stat.blksize);
2849 }
2850 #endif /* CONFIG_NFSD_PNFS */
2851 if (bmval2 & FATTR4_WORD2_SUPPATTR_EXCLCREAT) {
2852 u32 supp[3];
2853
2854 memcpy(supp, nfsd_suppattrs[minorversion], sizeof(supp));
2855 supp[0] &= NFSD_SUPPATTR_EXCLCREAT_WORD0;
2856 supp[1] &= NFSD_SUPPATTR_EXCLCREAT_WORD1;
2857 supp[2] &= NFSD_SUPPATTR_EXCLCREAT_WORD2;
2858
2859 status = nfsd4_encode_bitmap(xdr, supp[0], supp[1], supp[2]);
2860 if (status)
2861 goto out;
2862 }
2863
2864 if (bmval2 & FATTR4_WORD2_SECURITY_LABEL) {
2865 status = nfsd4_encode_security_label(xdr, rqstp, context,
2866 contextlen);
2867 if (status)
2868 goto out;
2869 }
2870
2871 attrlen = htonl(xdr->buf->len - attrlen_offset - 4);
2872 write_bytes_to_xdr_buf(xdr->buf, attrlen_offset, &attrlen, 4);
2873 status = nfs_ok;
2874
2875 out:
2876 #ifdef CONFIG_NFSD_V4_SECURITY_LABEL
2877 if (context)
2878 security_release_secctx(context, contextlen);
2879 #endif /* CONFIG_NFSD_V4_SECURITY_LABEL */
2880 kfree(acl);
2881 if (tempfh) {
2882 fh_put(tempfh);
2883 kfree(tempfh);
2884 }
2885 if (status)
2886 xdr_truncate_encode(xdr, starting_len);
2887 return status;
2888 out_nfserr:
2889 status = nfserrno(err);
2890 goto out;
2891 out_resource:
2892 status = nfserr_resource;
2893 goto out;
2894 }
2895
svcxdr_init_encode_from_buffer(struct xdr_stream * xdr,struct xdr_buf * buf,__be32 * p,int bytes)2896 static void svcxdr_init_encode_from_buffer(struct xdr_stream *xdr,
2897 struct xdr_buf *buf, __be32 *p, int bytes)
2898 {
2899 xdr->scratch.iov_len = 0;
2900 memset(buf, 0, sizeof(struct xdr_buf));
2901 buf->head[0].iov_base = p;
2902 buf->head[0].iov_len = 0;
2903 buf->len = 0;
2904 xdr->buf = buf;
2905 xdr->iov = buf->head;
2906 xdr->p = p;
2907 xdr->end = (void *)p + bytes;
2908 buf->buflen = bytes;
2909 }
2910
nfsd4_encode_fattr_to_buf(__be32 ** p,int words,struct svc_fh * fhp,struct svc_export * exp,struct dentry * dentry,u32 * bmval,struct svc_rqst * rqstp,int ignore_crossmnt)2911 __be32 nfsd4_encode_fattr_to_buf(__be32 **p, int words,
2912 struct svc_fh *fhp, struct svc_export *exp,
2913 struct dentry *dentry, u32 *bmval,
2914 struct svc_rqst *rqstp, int ignore_crossmnt)
2915 {
2916 struct xdr_buf dummy;
2917 struct xdr_stream xdr;
2918 __be32 ret;
2919
2920 svcxdr_init_encode_from_buffer(&xdr, &dummy, *p, words << 2);
2921 ret = nfsd4_encode_fattr(&xdr, fhp, exp, dentry, bmval, rqstp,
2922 ignore_crossmnt);
2923 *p = xdr.p;
2924 return ret;
2925 }
2926
attributes_need_mount(u32 * bmval)2927 static inline int attributes_need_mount(u32 *bmval)
2928 {
2929 if (bmval[0] & ~(FATTR4_WORD0_RDATTR_ERROR | FATTR4_WORD0_LEASE_TIME))
2930 return 1;
2931 if (bmval[1] & ~FATTR4_WORD1_MOUNTED_ON_FILEID)
2932 return 1;
2933 return 0;
2934 }
2935
2936 static __be32
nfsd4_encode_dirent_fattr(struct xdr_stream * xdr,struct nfsd4_readdir * cd,const char * name,int namlen)2937 nfsd4_encode_dirent_fattr(struct xdr_stream *xdr, struct nfsd4_readdir *cd,
2938 const char *name, int namlen)
2939 {
2940 struct svc_export *exp = cd->rd_fhp->fh_export;
2941 struct dentry *dentry;
2942 __be32 nfserr;
2943 int ignore_crossmnt = 0;
2944
2945 dentry = lookup_one_len_unlocked(name, cd->rd_fhp->fh_dentry, namlen);
2946 if (IS_ERR(dentry))
2947 return nfserrno(PTR_ERR(dentry));
2948 if (d_really_is_negative(dentry)) {
2949 /*
2950 * we're not holding the i_mutex here, so there's
2951 * a window where this directory entry could have gone
2952 * away.
2953 */
2954 dput(dentry);
2955 return nfserr_noent;
2956 }
2957
2958 exp_get(exp);
2959 /*
2960 * In the case of a mountpoint, the client may be asking for
2961 * attributes that are only properties of the underlying filesystem
2962 * as opposed to the cross-mounted file system. In such a case,
2963 * we will not follow the cross mount and will fill the attribtutes
2964 * directly from the mountpoint dentry.
2965 */
2966 if (nfsd_mountpoint(dentry, exp)) {
2967 int err;
2968
2969 if (!(exp->ex_flags & NFSEXP_V4ROOT)
2970 && !attributes_need_mount(cd->rd_bmval)) {
2971 ignore_crossmnt = 1;
2972 goto out_encode;
2973 }
2974 /*
2975 * Why the heck aren't we just using nfsd_lookup??
2976 * Different "."/".." handling? Something else?
2977 * At least, add a comment here to explain....
2978 */
2979 err = nfsd_cross_mnt(cd->rd_rqstp, &dentry, &exp);
2980 if (err) {
2981 nfserr = nfserrno(err);
2982 goto out_put;
2983 }
2984 nfserr = check_nfsd_access(exp, cd->rd_rqstp);
2985 if (nfserr)
2986 goto out_put;
2987
2988 }
2989 out_encode:
2990 nfserr = nfsd4_encode_fattr(xdr, NULL, exp, dentry, cd->rd_bmval,
2991 cd->rd_rqstp, ignore_crossmnt);
2992 out_put:
2993 dput(dentry);
2994 exp_put(exp);
2995 return nfserr;
2996 }
2997
2998 static __be32 *
nfsd4_encode_rdattr_error(struct xdr_stream * xdr,__be32 nfserr)2999 nfsd4_encode_rdattr_error(struct xdr_stream *xdr, __be32 nfserr)
3000 {
3001 __be32 *p;
3002
3003 p = xdr_reserve_space(xdr, 20);
3004 if (!p)
3005 return NULL;
3006 *p++ = htonl(2);
3007 *p++ = htonl(FATTR4_WORD0_RDATTR_ERROR); /* bmval0 */
3008 *p++ = htonl(0); /* bmval1 */
3009
3010 *p++ = htonl(4); /* attribute length */
3011 *p++ = nfserr; /* no htonl */
3012 return p;
3013 }
3014
3015 static int
nfsd4_encode_dirent(void * ccdv,const char * name,int namlen,loff_t offset,u64 ino,unsigned int d_type)3016 nfsd4_encode_dirent(void *ccdv, const char *name, int namlen,
3017 loff_t offset, u64 ino, unsigned int d_type)
3018 {
3019 struct readdir_cd *ccd = ccdv;
3020 struct nfsd4_readdir *cd = container_of(ccd, struct nfsd4_readdir, common);
3021 struct xdr_stream *xdr = cd->xdr;
3022 int start_offset = xdr->buf->len;
3023 int cookie_offset;
3024 u32 name_and_cookie;
3025 int entry_bytes;
3026 __be32 nfserr = nfserr_toosmall;
3027 __be64 wire_offset;
3028 __be32 *p;
3029
3030 /* In nfsv4, "." and ".." never make it onto the wire.. */
3031 if (name && isdotent(name, namlen)) {
3032 cd->common.err = nfs_ok;
3033 return 0;
3034 }
3035
3036 if (cd->cookie_offset) {
3037 wire_offset = cpu_to_be64(offset);
3038 write_bytes_to_xdr_buf(xdr->buf, cd->cookie_offset,
3039 &wire_offset, 8);
3040 }
3041
3042 p = xdr_reserve_space(xdr, 4);
3043 if (!p)
3044 goto fail;
3045 *p++ = xdr_one; /* mark entry present */
3046 cookie_offset = xdr->buf->len;
3047 p = xdr_reserve_space(xdr, 3*4 + namlen);
3048 if (!p)
3049 goto fail;
3050 p = xdr_encode_hyper(p, NFS_OFFSET_MAX); /* offset of next entry */
3051 p = xdr_encode_array(p, name, namlen); /* name length & name */
3052
3053 nfserr = nfsd4_encode_dirent_fattr(xdr, cd, name, namlen);
3054 switch (nfserr) {
3055 case nfs_ok:
3056 break;
3057 case nfserr_resource:
3058 nfserr = nfserr_toosmall;
3059 goto fail;
3060 case nfserr_noent:
3061 xdr_truncate_encode(xdr, start_offset);
3062 goto skip_entry;
3063 default:
3064 /*
3065 * If the client requested the RDATTR_ERROR attribute,
3066 * we stuff the error code into this attribute
3067 * and continue. If this attribute was not requested,
3068 * then in accordance with the spec, we fail the
3069 * entire READDIR operation(!)
3070 */
3071 if (!(cd->rd_bmval[0] & FATTR4_WORD0_RDATTR_ERROR))
3072 goto fail;
3073 p = nfsd4_encode_rdattr_error(xdr, nfserr);
3074 if (p == NULL) {
3075 nfserr = nfserr_toosmall;
3076 goto fail;
3077 }
3078 }
3079 nfserr = nfserr_toosmall;
3080 entry_bytes = xdr->buf->len - start_offset;
3081 if (entry_bytes > cd->rd_maxcount)
3082 goto fail;
3083 cd->rd_maxcount -= entry_bytes;
3084 /*
3085 * RFC 3530 14.2.24 describes rd_dircount as only a "hint", so
3086 * let's always let through the first entry, at least:
3087 */
3088 if (!cd->rd_dircount)
3089 goto fail;
3090 name_and_cookie = 4 + 4 * XDR_QUADLEN(namlen) + 8;
3091 if (name_and_cookie > cd->rd_dircount && cd->cookie_offset)
3092 goto fail;
3093 cd->rd_dircount -= min(cd->rd_dircount, name_and_cookie);
3094
3095 cd->cookie_offset = cookie_offset;
3096 skip_entry:
3097 cd->common.err = nfs_ok;
3098 return 0;
3099 fail:
3100 xdr_truncate_encode(xdr, start_offset);
3101 cd->common.err = nfserr;
3102 return -EINVAL;
3103 }
3104
3105 static __be32
nfsd4_encode_stateid(struct xdr_stream * xdr,stateid_t * sid)3106 nfsd4_encode_stateid(struct xdr_stream *xdr, stateid_t *sid)
3107 {
3108 __be32 *p;
3109
3110 p = xdr_reserve_space(xdr, sizeof(stateid_t));
3111 if (!p)
3112 return nfserr_resource;
3113 *p++ = cpu_to_be32(sid->si_generation);
3114 p = xdr_encode_opaque_fixed(p, &sid->si_opaque,
3115 sizeof(stateid_opaque_t));
3116 return 0;
3117 }
3118
3119 static __be32
nfsd4_encode_access(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_access * access)3120 nfsd4_encode_access(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_access *access)
3121 {
3122 struct xdr_stream *xdr = &resp->xdr;
3123 __be32 *p;
3124
3125 p = xdr_reserve_space(xdr, 8);
3126 if (!p)
3127 return nfserr_resource;
3128 *p++ = cpu_to_be32(access->ac_supported);
3129 *p++ = cpu_to_be32(access->ac_resp_access);
3130 return 0;
3131 }
3132
nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_bind_conn_to_session * bcts)3133 static __be32 nfsd4_encode_bind_conn_to_session(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_bind_conn_to_session *bcts)
3134 {
3135 struct xdr_stream *xdr = &resp->xdr;
3136 __be32 *p;
3137
3138 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 8);
3139 if (!p)
3140 return nfserr_resource;
3141 p = xdr_encode_opaque_fixed(p, bcts->sessionid.data,
3142 NFS4_MAX_SESSIONID_LEN);
3143 *p++ = cpu_to_be32(bcts->dir);
3144 /* Upshifting from TCP to RDMA is not supported */
3145 *p++ = cpu_to_be32(0);
3146 return 0;
3147 }
3148
3149 static __be32
nfsd4_encode_close(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_close * close)3150 nfsd4_encode_close(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_close *close)
3151 {
3152 struct xdr_stream *xdr = &resp->xdr;
3153
3154 return nfsd4_encode_stateid(xdr, &close->cl_stateid);
3155 }
3156
3157
3158 static __be32
nfsd4_encode_commit(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_commit * commit)3159 nfsd4_encode_commit(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_commit *commit)
3160 {
3161 struct xdr_stream *xdr = &resp->xdr;
3162 __be32 *p;
3163
3164 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3165 if (!p)
3166 return nfserr_resource;
3167 p = xdr_encode_opaque_fixed(p, commit->co_verf.data,
3168 NFS4_VERIFIER_SIZE);
3169 return 0;
3170 }
3171
3172 static __be32
nfsd4_encode_create(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_create * create)3173 nfsd4_encode_create(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_create *create)
3174 {
3175 struct xdr_stream *xdr = &resp->xdr;
3176 __be32 *p;
3177
3178 p = xdr_reserve_space(xdr, 20);
3179 if (!p)
3180 return nfserr_resource;
3181 encode_cinfo(p, &create->cr_cinfo);
3182 nfserr = nfsd4_encode_bitmap(xdr, create->cr_bmval[0],
3183 create->cr_bmval[1], create->cr_bmval[2]);
3184 return 0;
3185 }
3186
3187 static __be32
nfsd4_encode_getattr(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_getattr * getattr)3188 nfsd4_encode_getattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_getattr *getattr)
3189 {
3190 struct svc_fh *fhp = getattr->ga_fhp;
3191 struct xdr_stream *xdr = &resp->xdr;
3192
3193 return nfsd4_encode_fattr(xdr, fhp, fhp->fh_export, fhp->fh_dentry,
3194 getattr->ga_bmval, resp->rqstp, 0);
3195 }
3196
3197 static __be32
nfsd4_encode_getfh(struct nfsd4_compoundres * resp,__be32 nfserr,struct svc_fh ** fhpp)3198 nfsd4_encode_getfh(struct nfsd4_compoundres *resp, __be32 nfserr, struct svc_fh **fhpp)
3199 {
3200 struct xdr_stream *xdr = &resp->xdr;
3201 struct svc_fh *fhp = *fhpp;
3202 unsigned int len;
3203 __be32 *p;
3204
3205 len = fhp->fh_handle.fh_size;
3206 p = xdr_reserve_space(xdr, len + 4);
3207 if (!p)
3208 return nfserr_resource;
3209 p = xdr_encode_opaque(p, &fhp->fh_handle.fh_base, len);
3210 return 0;
3211 }
3212
3213 /*
3214 * Including all fields other than the name, a LOCK4denied structure requires
3215 * 8(clientid) + 4(namelen) + 8(offset) + 8(length) + 4(type) = 32 bytes.
3216 */
3217 static __be32
nfsd4_encode_lock_denied(struct xdr_stream * xdr,struct nfsd4_lock_denied * ld)3218 nfsd4_encode_lock_denied(struct xdr_stream *xdr, struct nfsd4_lock_denied *ld)
3219 {
3220 struct xdr_netobj *conf = &ld->ld_owner;
3221 __be32 *p;
3222
3223 again:
3224 p = xdr_reserve_space(xdr, 32 + XDR_LEN(conf->len));
3225 if (!p) {
3226 /*
3227 * Don't fail to return the result just because we can't
3228 * return the conflicting open:
3229 */
3230 if (conf->len) {
3231 kfree(conf->data);
3232 conf->len = 0;
3233 conf->data = NULL;
3234 goto again;
3235 }
3236 return nfserr_resource;
3237 }
3238 p = xdr_encode_hyper(p, ld->ld_start);
3239 p = xdr_encode_hyper(p, ld->ld_length);
3240 *p++ = cpu_to_be32(ld->ld_type);
3241 if (conf->len) {
3242 p = xdr_encode_opaque_fixed(p, &ld->ld_clientid, 8);
3243 p = xdr_encode_opaque(p, conf->data, conf->len);
3244 kfree(conf->data);
3245 } else { /* non - nfsv4 lock in conflict, no clientid nor owner */
3246 p = xdr_encode_hyper(p, (u64)0); /* clientid */
3247 *p++ = cpu_to_be32(0); /* length of owner name */
3248 }
3249 return nfserr_denied;
3250 }
3251
3252 static __be32
nfsd4_encode_lock(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_lock * lock)3253 nfsd4_encode_lock(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lock *lock)
3254 {
3255 struct xdr_stream *xdr = &resp->xdr;
3256
3257 if (!nfserr)
3258 nfserr = nfsd4_encode_stateid(xdr, &lock->lk_resp_stateid);
3259 else if (nfserr == nfserr_denied)
3260 nfserr = nfsd4_encode_lock_denied(xdr, &lock->lk_denied);
3261
3262 return nfserr;
3263 }
3264
3265 static __be32
nfsd4_encode_lockt(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_lockt * lockt)3266 nfsd4_encode_lockt(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_lockt *lockt)
3267 {
3268 struct xdr_stream *xdr = &resp->xdr;
3269
3270 if (nfserr == nfserr_denied)
3271 nfsd4_encode_lock_denied(xdr, &lockt->lt_denied);
3272 return nfserr;
3273 }
3274
3275 static __be32
nfsd4_encode_locku(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_locku * locku)3276 nfsd4_encode_locku(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_locku *locku)
3277 {
3278 struct xdr_stream *xdr = &resp->xdr;
3279
3280 return nfsd4_encode_stateid(xdr, &locku->lu_stateid);
3281 }
3282
3283
3284 static __be32
nfsd4_encode_link(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_link * link)3285 nfsd4_encode_link(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_link *link)
3286 {
3287 struct xdr_stream *xdr = &resp->xdr;
3288 __be32 *p;
3289
3290 p = xdr_reserve_space(xdr, 20);
3291 if (!p)
3292 return nfserr_resource;
3293 p = encode_cinfo(p, &link->li_cinfo);
3294 return 0;
3295 }
3296
3297
3298 static __be32
nfsd4_encode_open(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_open * open)3299 nfsd4_encode_open(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open *open)
3300 {
3301 struct xdr_stream *xdr = &resp->xdr;
3302 __be32 *p;
3303
3304 nfserr = nfsd4_encode_stateid(xdr, &open->op_stateid);
3305 if (nfserr)
3306 return nfserr;
3307 p = xdr_reserve_space(xdr, 24);
3308 if (!p)
3309 return nfserr_resource;
3310 p = encode_cinfo(p, &open->op_cinfo);
3311 *p++ = cpu_to_be32(open->op_rflags);
3312
3313 nfserr = nfsd4_encode_bitmap(xdr, open->op_bmval[0], open->op_bmval[1],
3314 open->op_bmval[2]);
3315 if (nfserr)
3316 return nfserr;
3317
3318 p = xdr_reserve_space(xdr, 4);
3319 if (!p)
3320 return nfserr_resource;
3321
3322 *p++ = cpu_to_be32(open->op_delegate_type);
3323 switch (open->op_delegate_type) {
3324 case NFS4_OPEN_DELEGATE_NONE:
3325 break;
3326 case NFS4_OPEN_DELEGATE_READ:
3327 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3328 if (nfserr)
3329 return nfserr;
3330 p = xdr_reserve_space(xdr, 20);
3331 if (!p)
3332 return nfserr_resource;
3333 *p++ = cpu_to_be32(open->op_recall);
3334
3335 /*
3336 * TODO: ACE's in delegations
3337 */
3338 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3339 *p++ = cpu_to_be32(0);
3340 *p++ = cpu_to_be32(0);
3341 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
3342 break;
3343 case NFS4_OPEN_DELEGATE_WRITE:
3344 nfserr = nfsd4_encode_stateid(xdr, &open->op_delegate_stateid);
3345 if (nfserr)
3346 return nfserr;
3347 p = xdr_reserve_space(xdr, 32);
3348 if (!p)
3349 return nfserr_resource;
3350 *p++ = cpu_to_be32(0);
3351
3352 /*
3353 * TODO: space_limit's in delegations
3354 */
3355 *p++ = cpu_to_be32(NFS4_LIMIT_SIZE);
3356 *p++ = cpu_to_be32(~(u32)0);
3357 *p++ = cpu_to_be32(~(u32)0);
3358
3359 /*
3360 * TODO: ACE's in delegations
3361 */
3362 *p++ = cpu_to_be32(NFS4_ACE_ACCESS_ALLOWED_ACE_TYPE);
3363 *p++ = cpu_to_be32(0);
3364 *p++ = cpu_to_be32(0);
3365 *p++ = cpu_to_be32(0); /* XXX: is NULL principal ok? */
3366 break;
3367 case NFS4_OPEN_DELEGATE_NONE_EXT: /* 4.1 */
3368 switch (open->op_why_no_deleg) {
3369 case WND4_CONTENTION:
3370 case WND4_RESOURCE:
3371 p = xdr_reserve_space(xdr, 8);
3372 if (!p)
3373 return nfserr_resource;
3374 *p++ = cpu_to_be32(open->op_why_no_deleg);
3375 /* deleg signaling not supported yet: */
3376 *p++ = cpu_to_be32(0);
3377 break;
3378 default:
3379 p = xdr_reserve_space(xdr, 4);
3380 if (!p)
3381 return nfserr_resource;
3382 *p++ = cpu_to_be32(open->op_why_no_deleg);
3383 }
3384 break;
3385 default:
3386 BUG();
3387 }
3388 /* XXX save filehandle here */
3389 return 0;
3390 }
3391
3392 static __be32
nfsd4_encode_open_confirm(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_open_confirm * oc)3393 nfsd4_encode_open_confirm(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_confirm *oc)
3394 {
3395 struct xdr_stream *xdr = &resp->xdr;
3396
3397 return nfsd4_encode_stateid(xdr, &oc->oc_resp_stateid);
3398 }
3399
3400 static __be32
nfsd4_encode_open_downgrade(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_open_downgrade * od)3401 nfsd4_encode_open_downgrade(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_open_downgrade *od)
3402 {
3403 struct xdr_stream *xdr = &resp->xdr;
3404
3405 return nfsd4_encode_stateid(xdr, &od->od_stateid);
3406 }
3407
nfsd4_encode_splice_read(struct nfsd4_compoundres * resp,struct nfsd4_read * read,struct file * file,unsigned long maxcount)3408 static __be32 nfsd4_encode_splice_read(
3409 struct nfsd4_compoundres *resp,
3410 struct nfsd4_read *read,
3411 struct file *file, unsigned long maxcount)
3412 {
3413 struct xdr_stream *xdr = &resp->xdr;
3414 struct xdr_buf *buf = xdr->buf;
3415 u32 eof;
3416 long len;
3417 int space_left;
3418 __be32 nfserr;
3419 __be32 *p = xdr->p - 2;
3420
3421 /* Make sure there will be room for padding if needed */
3422 if (xdr->end - xdr->p < 1)
3423 return nfserr_resource;
3424
3425 len = maxcount;
3426 nfserr = nfsd_splice_read(read->rd_rqstp, file,
3427 read->rd_offset, &maxcount);
3428 if (nfserr) {
3429 /*
3430 * nfsd_splice_actor may have already messed with the
3431 * page length; reset it so as not to confuse
3432 * xdr_truncate_encode:
3433 */
3434 buf->page_len = 0;
3435 return nfserr;
3436 }
3437
3438 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset,
3439 d_inode(read->rd_fhp->fh_dentry)->i_size);
3440
3441 *(p++) = htonl(eof);
3442 *(p++) = htonl(maxcount);
3443
3444 buf->page_len = maxcount;
3445 buf->len += maxcount;
3446 xdr->page_ptr += (buf->page_base + maxcount + PAGE_SIZE - 1)
3447 / PAGE_SIZE;
3448
3449 /* Use rest of head for padding and remaining ops: */
3450 buf->tail[0].iov_base = xdr->p;
3451 buf->tail[0].iov_len = 0;
3452 xdr->iov = buf->tail;
3453 if (maxcount&3) {
3454 int pad = 4 - (maxcount&3);
3455
3456 *(xdr->p++) = 0;
3457
3458 buf->tail[0].iov_base += maxcount&3;
3459 buf->tail[0].iov_len = pad;
3460 buf->len += pad;
3461 }
3462
3463 space_left = min_t(int, (void *)xdr->end - (void *)xdr->p,
3464 buf->buflen - buf->len);
3465 buf->buflen = buf->len + space_left;
3466 xdr->end = (__be32 *)((void *)xdr->end + space_left);
3467
3468 return 0;
3469 }
3470
nfsd4_encode_readv(struct nfsd4_compoundres * resp,struct nfsd4_read * read,struct file * file,unsigned long maxcount)3471 static __be32 nfsd4_encode_readv(struct nfsd4_compoundres *resp,
3472 struct nfsd4_read *read,
3473 struct file *file, unsigned long maxcount)
3474 {
3475 struct xdr_stream *xdr = &resp->xdr;
3476 u32 eof;
3477 int v;
3478 int starting_len = xdr->buf->len - 8;
3479 long len;
3480 int thislen;
3481 __be32 nfserr;
3482 __be32 tmp;
3483 __be32 *p;
3484 u32 zzz = 0;
3485 int pad;
3486
3487 len = maxcount;
3488 v = 0;
3489
3490 thislen = min_t(long, len, ((void *)xdr->end - (void *)xdr->p));
3491 p = xdr_reserve_space(xdr, (thislen+3)&~3);
3492 WARN_ON_ONCE(!p);
3493 resp->rqstp->rq_vec[v].iov_base = p;
3494 resp->rqstp->rq_vec[v].iov_len = thislen;
3495 v++;
3496 len -= thislen;
3497
3498 while (len) {
3499 thislen = min_t(long, len, PAGE_SIZE);
3500 p = xdr_reserve_space(xdr, (thislen+3)&~3);
3501 WARN_ON_ONCE(!p);
3502 resp->rqstp->rq_vec[v].iov_base = p;
3503 resp->rqstp->rq_vec[v].iov_len = thislen;
3504 v++;
3505 len -= thislen;
3506 }
3507 read->rd_vlen = v;
3508
3509 len = maxcount;
3510 nfserr = nfsd_readv(file, read->rd_offset, resp->rqstp->rq_vec,
3511 read->rd_vlen, &maxcount);
3512 if (nfserr)
3513 return nfserr;
3514 xdr_truncate_encode(xdr, starting_len + 8 + ((maxcount+3)&~3));
3515
3516 eof = nfsd_eof_on_read(len, maxcount, read->rd_offset,
3517 d_inode(read->rd_fhp->fh_dentry)->i_size);
3518
3519 tmp = htonl(eof);
3520 write_bytes_to_xdr_buf(xdr->buf, starting_len , &tmp, 4);
3521 tmp = htonl(maxcount);
3522 write_bytes_to_xdr_buf(xdr->buf, starting_len + 4, &tmp, 4);
3523
3524 pad = (maxcount&3) ? 4 - (maxcount&3) : 0;
3525 write_bytes_to_xdr_buf(xdr->buf, starting_len + 8 + maxcount,
3526 &zzz, pad);
3527 return 0;
3528
3529 }
3530
3531 static __be32
nfsd4_encode_read(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_read * read)3532 nfsd4_encode_read(struct nfsd4_compoundres *resp, __be32 nfserr,
3533 struct nfsd4_read *read)
3534 {
3535 unsigned long maxcount;
3536 struct xdr_stream *xdr = &resp->xdr;
3537 struct file *file = read->rd_filp;
3538 int starting_len = xdr->buf->len;
3539 struct raparms *ra = NULL;
3540 __be32 *p;
3541
3542 p = xdr_reserve_space(xdr, 8); /* eof flag and byte count */
3543 if (!p) {
3544 WARN_ON_ONCE(test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags));
3545 return nfserr_resource;
3546 }
3547 if (resp->xdr.buf->page_len &&
3548 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags)) {
3549 WARN_ON_ONCE(1);
3550 return nfserr_resource;
3551 }
3552 xdr_commit_encode(xdr);
3553
3554 maxcount = svc_max_payload(resp->rqstp);
3555 maxcount = min_t(unsigned long, maxcount,
3556 (xdr->buf->buflen - xdr->buf->len));
3557 maxcount = min_t(unsigned long, maxcount, read->rd_length);
3558
3559 if (read->rd_tmp_file)
3560 ra = nfsd_init_raparms(file);
3561
3562 if (file->f_op->splice_read &&
3563 test_bit(RQ_SPLICE_OK, &resp->rqstp->rq_flags))
3564 nfserr = nfsd4_encode_splice_read(resp, read, file, maxcount);
3565 else
3566 nfserr = nfsd4_encode_readv(resp, read, file, maxcount);
3567
3568 if (ra)
3569 nfsd_put_raparams(file, ra);
3570
3571 if (nfserr)
3572 xdr_truncate_encode(xdr, starting_len);
3573
3574 return nfserr;
3575 }
3576
3577 static __be32
nfsd4_encode_readlink(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_readlink * readlink)3578 nfsd4_encode_readlink(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readlink *readlink)
3579 {
3580 int maxcount;
3581 __be32 wire_count;
3582 int zero = 0;
3583 struct xdr_stream *xdr = &resp->xdr;
3584 int length_offset = xdr->buf->len;
3585 __be32 *p;
3586
3587 p = xdr_reserve_space(xdr, 4);
3588 if (!p)
3589 return nfserr_resource;
3590 maxcount = PAGE_SIZE;
3591
3592 p = xdr_reserve_space(xdr, maxcount);
3593 if (!p)
3594 return nfserr_resource;
3595 /*
3596 * XXX: By default, vfs_readlink() will truncate symlinks if they
3597 * would overflow the buffer. Is this kosher in NFSv4? If not, one
3598 * easy fix is: if vfs_readlink() precisely fills the buffer, assume
3599 * that truncation occurred, and return NFS4ERR_RESOURCE.
3600 */
3601 nfserr = nfsd_readlink(readlink->rl_rqstp, readlink->rl_fhp,
3602 (char *)p, &maxcount);
3603 if (nfserr == nfserr_isdir)
3604 nfserr = nfserr_inval;
3605 if (nfserr) {
3606 xdr_truncate_encode(xdr, length_offset);
3607 return nfserr;
3608 }
3609
3610 wire_count = htonl(maxcount);
3611 write_bytes_to_xdr_buf(xdr->buf, length_offset, &wire_count, 4);
3612 xdr_truncate_encode(xdr, length_offset + 4 + ALIGN(maxcount, 4));
3613 if (maxcount & 3)
3614 write_bytes_to_xdr_buf(xdr->buf, length_offset + 4 + maxcount,
3615 &zero, 4 - (maxcount&3));
3616 return 0;
3617 }
3618
3619 static __be32
nfsd4_encode_readdir(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_readdir * readdir)3620 nfsd4_encode_readdir(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_readdir *readdir)
3621 {
3622 int maxcount;
3623 int bytes_left;
3624 loff_t offset;
3625 __be64 wire_offset;
3626 struct xdr_stream *xdr = &resp->xdr;
3627 int starting_len = xdr->buf->len;
3628 __be32 *p;
3629
3630 p = xdr_reserve_space(xdr, NFS4_VERIFIER_SIZE);
3631 if (!p)
3632 return nfserr_resource;
3633
3634 /* XXX: Following NFSv3, we ignore the READDIR verifier for now. */
3635 *p++ = cpu_to_be32(0);
3636 *p++ = cpu_to_be32(0);
3637 resp->xdr.buf->head[0].iov_len = ((char *)resp->xdr.p)
3638 - (char *)resp->xdr.buf->head[0].iov_base;
3639
3640 /*
3641 * Number of bytes left for directory entries allowing for the
3642 * final 8 bytes of the readdir and a following failed op:
3643 */
3644 bytes_left = xdr->buf->buflen - xdr->buf->len
3645 - COMPOUND_ERR_SLACK_SPACE - 8;
3646 if (bytes_left < 0) {
3647 nfserr = nfserr_resource;
3648 goto err_no_verf;
3649 }
3650 maxcount = svc_max_payload(resp->rqstp);
3651 maxcount = min_t(u32, readdir->rd_maxcount, maxcount);
3652 /*
3653 * Note the rfc defines rd_maxcount as the size of the
3654 * READDIR4resok structure, which includes the verifier above
3655 * and the 8 bytes encoded at the end of this function:
3656 */
3657 if (maxcount < 16) {
3658 nfserr = nfserr_toosmall;
3659 goto err_no_verf;
3660 }
3661 maxcount = min_t(int, maxcount-16, bytes_left);
3662
3663 /* RFC 3530 14.2.24 allows us to ignore dircount when it's 0: */
3664 if (!readdir->rd_dircount)
3665 readdir->rd_dircount = svc_max_payload(resp->rqstp);
3666
3667 readdir->xdr = xdr;
3668 readdir->rd_maxcount = maxcount;
3669 readdir->common.err = 0;
3670 readdir->cookie_offset = 0;
3671
3672 offset = readdir->rd_cookie;
3673 nfserr = nfsd_readdir(readdir->rd_rqstp, readdir->rd_fhp,
3674 &offset,
3675 &readdir->common, nfsd4_encode_dirent);
3676 if (nfserr == nfs_ok &&
3677 readdir->common.err == nfserr_toosmall &&
3678 xdr->buf->len == starting_len + 8) {
3679 /* nothing encoded; which limit did we hit?: */
3680 if (maxcount - 16 < bytes_left)
3681 /* It was the fault of rd_maxcount: */
3682 nfserr = nfserr_toosmall;
3683 else
3684 /* We ran out of buffer space: */
3685 nfserr = nfserr_resource;
3686 }
3687 if (nfserr)
3688 goto err_no_verf;
3689
3690 if (readdir->cookie_offset) {
3691 wire_offset = cpu_to_be64(offset);
3692 write_bytes_to_xdr_buf(xdr->buf, readdir->cookie_offset,
3693 &wire_offset, 8);
3694 }
3695
3696 p = xdr_reserve_space(xdr, 8);
3697 if (!p) {
3698 WARN_ON_ONCE(1);
3699 goto err_no_verf;
3700 }
3701 *p++ = 0; /* no more entries */
3702 *p++ = htonl(readdir->common.err == nfserr_eof);
3703
3704 return 0;
3705 err_no_verf:
3706 xdr_truncate_encode(xdr, starting_len);
3707 return nfserr;
3708 }
3709
3710 static __be32
nfsd4_encode_remove(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_remove * remove)3711 nfsd4_encode_remove(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_remove *remove)
3712 {
3713 struct xdr_stream *xdr = &resp->xdr;
3714 __be32 *p;
3715
3716 p = xdr_reserve_space(xdr, 20);
3717 if (!p)
3718 return nfserr_resource;
3719 p = encode_cinfo(p, &remove->rm_cinfo);
3720 return 0;
3721 }
3722
3723 static __be32
nfsd4_encode_rename(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_rename * rename)3724 nfsd4_encode_rename(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_rename *rename)
3725 {
3726 struct xdr_stream *xdr = &resp->xdr;
3727 __be32 *p;
3728
3729 p = xdr_reserve_space(xdr, 40);
3730 if (!p)
3731 return nfserr_resource;
3732 p = encode_cinfo(p, &rename->rn_sinfo);
3733 p = encode_cinfo(p, &rename->rn_tinfo);
3734 return 0;
3735 }
3736
3737 static __be32
nfsd4_do_encode_secinfo(struct xdr_stream * xdr,struct svc_export * exp)3738 nfsd4_do_encode_secinfo(struct xdr_stream *xdr, struct svc_export *exp)
3739 {
3740 u32 i, nflavs, supported;
3741 struct exp_flavor_info *flavs;
3742 struct exp_flavor_info def_flavs[2];
3743 __be32 *p, *flavorsp;
3744 static bool report = true;
3745
3746 if (exp->ex_nflavors) {
3747 flavs = exp->ex_flavors;
3748 nflavs = exp->ex_nflavors;
3749 } else { /* Handling of some defaults in absence of real secinfo: */
3750 flavs = def_flavs;
3751 if (exp->ex_client->flavour->flavour == RPC_AUTH_UNIX) {
3752 nflavs = 2;
3753 flavs[0].pseudoflavor = RPC_AUTH_UNIX;
3754 flavs[1].pseudoflavor = RPC_AUTH_NULL;
3755 } else if (exp->ex_client->flavour->flavour == RPC_AUTH_GSS) {
3756 nflavs = 1;
3757 flavs[0].pseudoflavor
3758 = svcauth_gss_flavor(exp->ex_client);
3759 } else {
3760 nflavs = 1;
3761 flavs[0].pseudoflavor
3762 = exp->ex_client->flavour->flavour;
3763 }
3764 }
3765
3766 supported = 0;
3767 p = xdr_reserve_space(xdr, 4);
3768 if (!p)
3769 return nfserr_resource;
3770 flavorsp = p++; /* to be backfilled later */
3771
3772 for (i = 0; i < nflavs; i++) {
3773 rpc_authflavor_t pf = flavs[i].pseudoflavor;
3774 struct rpcsec_gss_info info;
3775
3776 if (rpcauth_get_gssinfo(pf, &info) == 0) {
3777 supported++;
3778 p = xdr_reserve_space(xdr, 4 + 4 +
3779 XDR_LEN(info.oid.len) + 4 + 4);
3780 if (!p)
3781 return nfserr_resource;
3782 *p++ = cpu_to_be32(RPC_AUTH_GSS);
3783 p = xdr_encode_opaque(p, info.oid.data, info.oid.len);
3784 *p++ = cpu_to_be32(info.qop);
3785 *p++ = cpu_to_be32(info.service);
3786 } else if (pf < RPC_AUTH_MAXFLAVOR) {
3787 supported++;
3788 p = xdr_reserve_space(xdr, 4);
3789 if (!p)
3790 return nfserr_resource;
3791 *p++ = cpu_to_be32(pf);
3792 } else {
3793 if (report)
3794 pr_warn("NFS: SECINFO: security flavor %u "
3795 "is not supported\n", pf);
3796 }
3797 }
3798
3799 if (nflavs != supported)
3800 report = false;
3801 *flavorsp = htonl(supported);
3802 return 0;
3803 }
3804
3805 static __be32
nfsd4_encode_secinfo(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_secinfo * secinfo)3806 nfsd4_encode_secinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
3807 struct nfsd4_secinfo *secinfo)
3808 {
3809 struct xdr_stream *xdr = &resp->xdr;
3810
3811 return nfsd4_do_encode_secinfo(xdr, secinfo->si_exp);
3812 }
3813
3814 static __be32
nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_secinfo_no_name * secinfo)3815 nfsd4_encode_secinfo_no_name(struct nfsd4_compoundres *resp, __be32 nfserr,
3816 struct nfsd4_secinfo_no_name *secinfo)
3817 {
3818 struct xdr_stream *xdr = &resp->xdr;
3819
3820 return nfsd4_do_encode_secinfo(xdr, secinfo->sin_exp);
3821 }
3822
3823 /*
3824 * The SETATTR encode routine is special -- it always encodes a bitmap,
3825 * regardless of the error status.
3826 */
3827 static __be32
nfsd4_encode_setattr(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_setattr * setattr)3828 nfsd4_encode_setattr(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setattr *setattr)
3829 {
3830 struct xdr_stream *xdr = &resp->xdr;
3831 __be32 *p;
3832
3833 p = xdr_reserve_space(xdr, 16);
3834 if (!p)
3835 return nfserr_resource;
3836 if (nfserr) {
3837 *p++ = cpu_to_be32(3);
3838 *p++ = cpu_to_be32(0);
3839 *p++ = cpu_to_be32(0);
3840 *p++ = cpu_to_be32(0);
3841 }
3842 else {
3843 *p++ = cpu_to_be32(3);
3844 *p++ = cpu_to_be32(setattr->sa_bmval[0]);
3845 *p++ = cpu_to_be32(setattr->sa_bmval[1]);
3846 *p++ = cpu_to_be32(setattr->sa_bmval[2]);
3847 }
3848 return nfserr;
3849 }
3850
3851 static __be32
nfsd4_encode_setclientid(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_setclientid * scd)3852 nfsd4_encode_setclientid(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_setclientid *scd)
3853 {
3854 struct xdr_stream *xdr = &resp->xdr;
3855 __be32 *p;
3856
3857 if (!nfserr) {
3858 p = xdr_reserve_space(xdr, 8 + NFS4_VERIFIER_SIZE);
3859 if (!p)
3860 return nfserr_resource;
3861 p = xdr_encode_opaque_fixed(p, &scd->se_clientid, 8);
3862 p = xdr_encode_opaque_fixed(p, &scd->se_confirm,
3863 NFS4_VERIFIER_SIZE);
3864 }
3865 else if (nfserr == nfserr_clid_inuse) {
3866 p = xdr_reserve_space(xdr, 8);
3867 if (!p)
3868 return nfserr_resource;
3869 *p++ = cpu_to_be32(0);
3870 *p++ = cpu_to_be32(0);
3871 }
3872 return nfserr;
3873 }
3874
3875 static __be32
nfsd4_encode_write(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_write * write)3876 nfsd4_encode_write(struct nfsd4_compoundres *resp, __be32 nfserr, struct nfsd4_write *write)
3877 {
3878 struct xdr_stream *xdr = &resp->xdr;
3879 __be32 *p;
3880
3881 p = xdr_reserve_space(xdr, 16);
3882 if (!p)
3883 return nfserr_resource;
3884 *p++ = cpu_to_be32(write->wr_bytes_written);
3885 *p++ = cpu_to_be32(write->wr_how_written);
3886 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
3887 NFS4_VERIFIER_SIZE);
3888 return 0;
3889 }
3890
3891 static __be32
nfsd4_encode_exchange_id(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_exchange_id * exid)3892 nfsd4_encode_exchange_id(struct nfsd4_compoundres *resp, __be32 nfserr,
3893 struct nfsd4_exchange_id *exid)
3894 {
3895 struct xdr_stream *xdr = &resp->xdr;
3896 __be32 *p;
3897 char *major_id;
3898 char *server_scope;
3899 int major_id_sz;
3900 int server_scope_sz;
3901 uint64_t minor_id = 0;
3902
3903 major_id = utsname()->nodename;
3904 major_id_sz = strlen(major_id);
3905 server_scope = utsname()->nodename;
3906 server_scope_sz = strlen(server_scope);
3907
3908 p = xdr_reserve_space(xdr,
3909 8 /* eir_clientid */ +
3910 4 /* eir_sequenceid */ +
3911 4 /* eir_flags */ +
3912 4 /* spr_how */);
3913 if (!p)
3914 return nfserr_resource;
3915
3916 p = xdr_encode_opaque_fixed(p, &exid->clientid, 8);
3917 *p++ = cpu_to_be32(exid->seqid);
3918 *p++ = cpu_to_be32(exid->flags);
3919
3920 *p++ = cpu_to_be32(exid->spa_how);
3921
3922 switch (exid->spa_how) {
3923 case SP4_NONE:
3924 break;
3925 case SP4_MACH_CRED:
3926 /* spo_must_enforce bitmap: */
3927 nfserr = nfsd4_encode_bitmap(xdr,
3928 exid->spo_must_enforce[0],
3929 exid->spo_must_enforce[1],
3930 exid->spo_must_enforce[2]);
3931 if (nfserr)
3932 return nfserr;
3933 /* spo_must_allow bitmap: */
3934 nfserr = nfsd4_encode_bitmap(xdr,
3935 exid->spo_must_allow[0],
3936 exid->spo_must_allow[1],
3937 exid->spo_must_allow[2]);
3938 if (nfserr)
3939 return nfserr;
3940 break;
3941 default:
3942 WARN_ON_ONCE(1);
3943 }
3944
3945 p = xdr_reserve_space(xdr,
3946 8 /* so_minor_id */ +
3947 4 /* so_major_id.len */ +
3948 (XDR_QUADLEN(major_id_sz) * 4) +
3949 4 /* eir_server_scope.len */ +
3950 (XDR_QUADLEN(server_scope_sz) * 4) +
3951 4 /* eir_server_impl_id.count (0) */);
3952 if (!p)
3953 return nfserr_resource;
3954
3955 /* The server_owner struct */
3956 p = xdr_encode_hyper(p, minor_id); /* Minor id */
3957 /* major id */
3958 p = xdr_encode_opaque(p, major_id, major_id_sz);
3959
3960 /* Server scope */
3961 p = xdr_encode_opaque(p, server_scope, server_scope_sz);
3962
3963 /* Implementation id */
3964 *p++ = cpu_to_be32(0); /* zero length nfs_impl_id4 array */
3965 return 0;
3966 }
3967
3968 static __be32
nfsd4_encode_create_session(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_create_session * sess)3969 nfsd4_encode_create_session(struct nfsd4_compoundres *resp, __be32 nfserr,
3970 struct nfsd4_create_session *sess)
3971 {
3972 struct xdr_stream *xdr = &resp->xdr;
3973 __be32 *p;
3974
3975 p = xdr_reserve_space(xdr, 24);
3976 if (!p)
3977 return nfserr_resource;
3978 p = xdr_encode_opaque_fixed(p, sess->sessionid.data,
3979 NFS4_MAX_SESSIONID_LEN);
3980 *p++ = cpu_to_be32(sess->seqid);
3981 *p++ = cpu_to_be32(sess->flags);
3982
3983 p = xdr_reserve_space(xdr, 28);
3984 if (!p)
3985 return nfserr_resource;
3986 *p++ = cpu_to_be32(0); /* headerpadsz */
3987 *p++ = cpu_to_be32(sess->fore_channel.maxreq_sz);
3988 *p++ = cpu_to_be32(sess->fore_channel.maxresp_sz);
3989 *p++ = cpu_to_be32(sess->fore_channel.maxresp_cached);
3990 *p++ = cpu_to_be32(sess->fore_channel.maxops);
3991 *p++ = cpu_to_be32(sess->fore_channel.maxreqs);
3992 *p++ = cpu_to_be32(sess->fore_channel.nr_rdma_attrs);
3993
3994 if (sess->fore_channel.nr_rdma_attrs) {
3995 p = xdr_reserve_space(xdr, 4);
3996 if (!p)
3997 return nfserr_resource;
3998 *p++ = cpu_to_be32(sess->fore_channel.rdma_attrs);
3999 }
4000
4001 p = xdr_reserve_space(xdr, 28);
4002 if (!p)
4003 return nfserr_resource;
4004 *p++ = cpu_to_be32(0); /* headerpadsz */
4005 *p++ = cpu_to_be32(sess->back_channel.maxreq_sz);
4006 *p++ = cpu_to_be32(sess->back_channel.maxresp_sz);
4007 *p++ = cpu_to_be32(sess->back_channel.maxresp_cached);
4008 *p++ = cpu_to_be32(sess->back_channel.maxops);
4009 *p++ = cpu_to_be32(sess->back_channel.maxreqs);
4010 *p++ = cpu_to_be32(sess->back_channel.nr_rdma_attrs);
4011
4012 if (sess->back_channel.nr_rdma_attrs) {
4013 p = xdr_reserve_space(xdr, 4);
4014 if (!p)
4015 return nfserr_resource;
4016 *p++ = cpu_to_be32(sess->back_channel.rdma_attrs);
4017 }
4018 return 0;
4019 }
4020
4021 static __be32
nfsd4_encode_sequence(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_sequence * seq)4022 nfsd4_encode_sequence(struct nfsd4_compoundres *resp, __be32 nfserr,
4023 struct nfsd4_sequence *seq)
4024 {
4025 struct xdr_stream *xdr = &resp->xdr;
4026 __be32 *p;
4027
4028 p = xdr_reserve_space(xdr, NFS4_MAX_SESSIONID_LEN + 20);
4029 if (!p)
4030 return nfserr_resource;
4031 p = xdr_encode_opaque_fixed(p, seq->sessionid.data,
4032 NFS4_MAX_SESSIONID_LEN);
4033 *p++ = cpu_to_be32(seq->seqid);
4034 *p++ = cpu_to_be32(seq->slotid);
4035 /* Note slotid's are numbered from zero: */
4036 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_highest_slotid */
4037 *p++ = cpu_to_be32(seq->maxslots - 1); /* sr_target_highest_slotid */
4038 *p++ = cpu_to_be32(seq->status_flags);
4039
4040 resp->cstate.data_offset = xdr->buf->len; /* DRC cache data pointer */
4041 return 0;
4042 }
4043
4044 static __be32
nfsd4_encode_test_stateid(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_test_stateid * test_stateid)4045 nfsd4_encode_test_stateid(struct nfsd4_compoundres *resp, __be32 nfserr,
4046 struct nfsd4_test_stateid *test_stateid)
4047 {
4048 struct xdr_stream *xdr = &resp->xdr;
4049 struct nfsd4_test_stateid_id *stateid, *next;
4050 __be32 *p;
4051
4052 p = xdr_reserve_space(xdr, 4 + (4 * test_stateid->ts_num_ids));
4053 if (!p)
4054 return nfserr_resource;
4055 *p++ = htonl(test_stateid->ts_num_ids);
4056
4057 list_for_each_entry_safe(stateid, next, &test_stateid->ts_stateid_list, ts_id_list) {
4058 *p++ = stateid->ts_id_status;
4059 }
4060
4061 return 0;
4062 }
4063
4064 #ifdef CONFIG_NFSD_PNFS
4065 static __be32
nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_getdeviceinfo * gdev)4066 nfsd4_encode_getdeviceinfo(struct nfsd4_compoundres *resp, __be32 nfserr,
4067 struct nfsd4_getdeviceinfo *gdev)
4068 {
4069 struct xdr_stream *xdr = &resp->xdr;
4070 const struct nfsd4_layout_ops *ops;
4071 u32 starting_len = xdr->buf->len, needed_len;
4072 __be32 *p;
4073
4074 p = xdr_reserve_space(xdr, 4);
4075 if (!p)
4076 return nfserr_resource;
4077
4078 *p++ = cpu_to_be32(gdev->gd_layout_type);
4079
4080 /* If maxcount is 0 then just update notifications */
4081 if (gdev->gd_maxcount != 0) {
4082 ops = nfsd4_layout_ops[gdev->gd_layout_type];
4083 nfserr = ops->encode_getdeviceinfo(xdr, gdev);
4084 if (nfserr) {
4085 /*
4086 * We don't bother to burden the layout drivers with
4087 * enforcing gd_maxcount, just tell the client to
4088 * come back with a bigger buffer if it's not enough.
4089 */
4090 if (xdr->buf->len + 4 > gdev->gd_maxcount)
4091 goto toosmall;
4092 return nfserr;
4093 }
4094 }
4095
4096 if (gdev->gd_notify_types) {
4097 p = xdr_reserve_space(xdr, 4 + 4);
4098 if (!p)
4099 return nfserr_resource;
4100 *p++ = cpu_to_be32(1); /* bitmap length */
4101 *p++ = cpu_to_be32(gdev->gd_notify_types);
4102 } else {
4103 p = xdr_reserve_space(xdr, 4);
4104 if (!p)
4105 return nfserr_resource;
4106 *p++ = 0;
4107 }
4108
4109 return 0;
4110 toosmall:
4111 dprintk("%s: maxcount too small\n", __func__);
4112 needed_len = xdr->buf->len + 4 /* notifications */;
4113 xdr_truncate_encode(xdr, starting_len);
4114 p = xdr_reserve_space(xdr, 4);
4115 if (!p)
4116 return nfserr_resource;
4117 *p++ = cpu_to_be32(needed_len);
4118 return nfserr_toosmall;
4119 }
4120
4121 static __be32
nfsd4_encode_layoutget(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_layoutget * lgp)4122 nfsd4_encode_layoutget(struct nfsd4_compoundres *resp, __be32 nfserr,
4123 struct nfsd4_layoutget *lgp)
4124 {
4125 struct xdr_stream *xdr = &resp->xdr;
4126 const struct nfsd4_layout_ops *ops;
4127 __be32 *p;
4128
4129 p = xdr_reserve_space(xdr, 36 + sizeof(stateid_opaque_t));
4130 if (!p)
4131 return nfserr_resource;
4132
4133 *p++ = cpu_to_be32(1); /* we always set return-on-close */
4134 *p++ = cpu_to_be32(lgp->lg_sid.si_generation);
4135 p = xdr_encode_opaque_fixed(p, &lgp->lg_sid.si_opaque,
4136 sizeof(stateid_opaque_t));
4137
4138 *p++ = cpu_to_be32(1); /* we always return a single layout */
4139 p = xdr_encode_hyper(p, lgp->lg_seg.offset);
4140 p = xdr_encode_hyper(p, lgp->lg_seg.length);
4141 *p++ = cpu_to_be32(lgp->lg_seg.iomode);
4142 *p++ = cpu_to_be32(lgp->lg_layout_type);
4143
4144 ops = nfsd4_layout_ops[lgp->lg_layout_type];
4145 return ops->encode_layoutget(xdr, lgp);
4146 }
4147
4148 static __be32
nfsd4_encode_layoutcommit(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_layoutcommit * lcp)4149 nfsd4_encode_layoutcommit(struct nfsd4_compoundres *resp, __be32 nfserr,
4150 struct nfsd4_layoutcommit *lcp)
4151 {
4152 struct xdr_stream *xdr = &resp->xdr;
4153 __be32 *p;
4154
4155 p = xdr_reserve_space(xdr, 4);
4156 if (!p)
4157 return nfserr_resource;
4158 *p++ = cpu_to_be32(lcp->lc_size_chg);
4159 if (lcp->lc_size_chg) {
4160 p = xdr_reserve_space(xdr, 8);
4161 if (!p)
4162 return nfserr_resource;
4163 p = xdr_encode_hyper(p, lcp->lc_newsize);
4164 }
4165
4166 return 0;
4167 }
4168
4169 static __be32
nfsd4_encode_layoutreturn(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_layoutreturn * lrp)4170 nfsd4_encode_layoutreturn(struct nfsd4_compoundres *resp, __be32 nfserr,
4171 struct nfsd4_layoutreturn *lrp)
4172 {
4173 struct xdr_stream *xdr = &resp->xdr;
4174 __be32 *p;
4175
4176 p = xdr_reserve_space(xdr, 4);
4177 if (!p)
4178 return nfserr_resource;
4179 *p++ = cpu_to_be32(lrp->lrs_present);
4180 if (lrp->lrs_present)
4181 return nfsd4_encode_stateid(xdr, &lrp->lr_sid);
4182 return 0;
4183 }
4184 #endif /* CONFIG_NFSD_PNFS */
4185
4186 static __be32
nfsd42_encode_write_res(struct nfsd4_compoundres * resp,struct nfsd42_write_res * write)4187 nfsd42_encode_write_res(struct nfsd4_compoundres *resp, struct nfsd42_write_res *write)
4188 {
4189 __be32 *p;
4190
4191 p = xdr_reserve_space(&resp->xdr, 4 + 8 + 4 + NFS4_VERIFIER_SIZE);
4192 if (!p)
4193 return nfserr_resource;
4194
4195 *p++ = cpu_to_be32(0);
4196 p = xdr_encode_hyper(p, write->wr_bytes_written);
4197 *p++ = cpu_to_be32(write->wr_stable_how);
4198 p = xdr_encode_opaque_fixed(p, write->wr_verifier.data,
4199 NFS4_VERIFIER_SIZE);
4200 return nfs_ok;
4201 }
4202
4203 static __be32
nfsd4_encode_copy(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_copy * copy)4204 nfsd4_encode_copy(struct nfsd4_compoundres *resp, __be32 nfserr,
4205 struct nfsd4_copy *copy)
4206 {
4207 __be32 *p;
4208
4209 nfserr = nfsd42_encode_write_res(resp, ©->cp_res);
4210 if (nfserr)
4211 return nfserr;
4212
4213 p = xdr_reserve_space(&resp->xdr, 4 + 4);
4214 *p++ = cpu_to_be32(copy->cp_consecutive);
4215 *p++ = cpu_to_be32(copy->cp_synchronous);
4216 return 0;
4217 }
4218
4219 static __be32
nfsd4_encode_seek(struct nfsd4_compoundres * resp,__be32 nfserr,struct nfsd4_seek * seek)4220 nfsd4_encode_seek(struct nfsd4_compoundres *resp, __be32 nfserr,
4221 struct nfsd4_seek *seek)
4222 {
4223 __be32 *p;
4224
4225 p = xdr_reserve_space(&resp->xdr, 4 + 8);
4226 *p++ = cpu_to_be32(seek->seek_eof);
4227 p = xdr_encode_hyper(p, seek->seek_pos);
4228
4229 return 0;
4230 }
4231
4232 static __be32
nfsd4_encode_noop(struct nfsd4_compoundres * resp,__be32 nfserr,void * p)4233 nfsd4_encode_noop(struct nfsd4_compoundres *resp, __be32 nfserr, void *p)
4234 {
4235 return nfserr;
4236 }
4237
4238 typedef __be32(* nfsd4_enc)(struct nfsd4_compoundres *, __be32, void *);
4239
4240 /*
4241 * Note: nfsd4_enc_ops vector is shared for v4.0 and v4.1
4242 * since we don't need to filter out obsolete ops as this is
4243 * done in the decoding phase.
4244 */
4245 static const nfsd4_enc nfsd4_enc_ops[] = {
4246 [OP_ACCESS] = (nfsd4_enc)nfsd4_encode_access,
4247 [OP_CLOSE] = (nfsd4_enc)nfsd4_encode_close,
4248 [OP_COMMIT] = (nfsd4_enc)nfsd4_encode_commit,
4249 [OP_CREATE] = (nfsd4_enc)nfsd4_encode_create,
4250 [OP_DELEGPURGE] = (nfsd4_enc)nfsd4_encode_noop,
4251 [OP_DELEGRETURN] = (nfsd4_enc)nfsd4_encode_noop,
4252 [OP_GETATTR] = (nfsd4_enc)nfsd4_encode_getattr,
4253 [OP_GETFH] = (nfsd4_enc)nfsd4_encode_getfh,
4254 [OP_LINK] = (nfsd4_enc)nfsd4_encode_link,
4255 [OP_LOCK] = (nfsd4_enc)nfsd4_encode_lock,
4256 [OP_LOCKT] = (nfsd4_enc)nfsd4_encode_lockt,
4257 [OP_LOCKU] = (nfsd4_enc)nfsd4_encode_locku,
4258 [OP_LOOKUP] = (nfsd4_enc)nfsd4_encode_noop,
4259 [OP_LOOKUPP] = (nfsd4_enc)nfsd4_encode_noop,
4260 [OP_NVERIFY] = (nfsd4_enc)nfsd4_encode_noop,
4261 [OP_OPEN] = (nfsd4_enc)nfsd4_encode_open,
4262 [OP_OPENATTR] = (nfsd4_enc)nfsd4_encode_noop,
4263 [OP_OPEN_CONFIRM] = (nfsd4_enc)nfsd4_encode_open_confirm,
4264 [OP_OPEN_DOWNGRADE] = (nfsd4_enc)nfsd4_encode_open_downgrade,
4265 [OP_PUTFH] = (nfsd4_enc)nfsd4_encode_noop,
4266 [OP_PUTPUBFH] = (nfsd4_enc)nfsd4_encode_noop,
4267 [OP_PUTROOTFH] = (nfsd4_enc)nfsd4_encode_noop,
4268 [OP_READ] = (nfsd4_enc)nfsd4_encode_read,
4269 [OP_READDIR] = (nfsd4_enc)nfsd4_encode_readdir,
4270 [OP_READLINK] = (nfsd4_enc)nfsd4_encode_readlink,
4271 [OP_REMOVE] = (nfsd4_enc)nfsd4_encode_remove,
4272 [OP_RENAME] = (nfsd4_enc)nfsd4_encode_rename,
4273 [OP_RENEW] = (nfsd4_enc)nfsd4_encode_noop,
4274 [OP_RESTOREFH] = (nfsd4_enc)nfsd4_encode_noop,
4275 [OP_SAVEFH] = (nfsd4_enc)nfsd4_encode_noop,
4276 [OP_SECINFO] = (nfsd4_enc)nfsd4_encode_secinfo,
4277 [OP_SETATTR] = (nfsd4_enc)nfsd4_encode_setattr,
4278 [OP_SETCLIENTID] = (nfsd4_enc)nfsd4_encode_setclientid,
4279 [OP_SETCLIENTID_CONFIRM] = (nfsd4_enc)nfsd4_encode_noop,
4280 [OP_VERIFY] = (nfsd4_enc)nfsd4_encode_noop,
4281 [OP_WRITE] = (nfsd4_enc)nfsd4_encode_write,
4282 [OP_RELEASE_LOCKOWNER] = (nfsd4_enc)nfsd4_encode_noop,
4283
4284 /* NFSv4.1 operations */
4285 [OP_BACKCHANNEL_CTL] = (nfsd4_enc)nfsd4_encode_noop,
4286 [OP_BIND_CONN_TO_SESSION] = (nfsd4_enc)nfsd4_encode_bind_conn_to_session,
4287 [OP_EXCHANGE_ID] = (nfsd4_enc)nfsd4_encode_exchange_id,
4288 [OP_CREATE_SESSION] = (nfsd4_enc)nfsd4_encode_create_session,
4289 [OP_DESTROY_SESSION] = (nfsd4_enc)nfsd4_encode_noop,
4290 [OP_FREE_STATEID] = (nfsd4_enc)nfsd4_encode_noop,
4291 [OP_GET_DIR_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
4292 #ifdef CONFIG_NFSD_PNFS
4293 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_getdeviceinfo,
4294 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
4295 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_layoutcommit,
4296 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_layoutget,
4297 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_layoutreturn,
4298 #else
4299 [OP_GETDEVICEINFO] = (nfsd4_enc)nfsd4_encode_noop,
4300 [OP_GETDEVICELIST] = (nfsd4_enc)nfsd4_encode_noop,
4301 [OP_LAYOUTCOMMIT] = (nfsd4_enc)nfsd4_encode_noop,
4302 [OP_LAYOUTGET] = (nfsd4_enc)nfsd4_encode_noop,
4303 [OP_LAYOUTRETURN] = (nfsd4_enc)nfsd4_encode_noop,
4304 #endif
4305 [OP_SECINFO_NO_NAME] = (nfsd4_enc)nfsd4_encode_secinfo_no_name,
4306 [OP_SEQUENCE] = (nfsd4_enc)nfsd4_encode_sequence,
4307 [OP_SET_SSV] = (nfsd4_enc)nfsd4_encode_noop,
4308 [OP_TEST_STATEID] = (nfsd4_enc)nfsd4_encode_test_stateid,
4309 [OP_WANT_DELEGATION] = (nfsd4_enc)nfsd4_encode_noop,
4310 [OP_DESTROY_CLIENTID] = (nfsd4_enc)nfsd4_encode_noop,
4311 [OP_RECLAIM_COMPLETE] = (nfsd4_enc)nfsd4_encode_noop,
4312
4313 /* NFSv4.2 operations */
4314 [OP_ALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
4315 [OP_COPY] = (nfsd4_enc)nfsd4_encode_copy,
4316 [OP_COPY_NOTIFY] = (nfsd4_enc)nfsd4_encode_noop,
4317 [OP_DEALLOCATE] = (nfsd4_enc)nfsd4_encode_noop,
4318 [OP_IO_ADVISE] = (nfsd4_enc)nfsd4_encode_noop,
4319 [OP_LAYOUTERROR] = (nfsd4_enc)nfsd4_encode_noop,
4320 [OP_LAYOUTSTATS] = (nfsd4_enc)nfsd4_encode_noop,
4321 [OP_OFFLOAD_CANCEL] = (nfsd4_enc)nfsd4_encode_noop,
4322 [OP_OFFLOAD_STATUS] = (nfsd4_enc)nfsd4_encode_noop,
4323 [OP_READ_PLUS] = (nfsd4_enc)nfsd4_encode_noop,
4324 [OP_SEEK] = (nfsd4_enc)nfsd4_encode_seek,
4325 [OP_WRITE_SAME] = (nfsd4_enc)nfsd4_encode_noop,
4326 [OP_CLONE] = (nfsd4_enc)nfsd4_encode_noop,
4327 };
4328
4329 /*
4330 * Calculate whether we still have space to encode repsize bytes.
4331 * There are two considerations:
4332 * - For NFS versions >=4.1, the size of the reply must stay within
4333 * session limits
4334 * - For all NFS versions, we must stay within limited preallocated
4335 * buffer space.
4336 *
4337 * This is called before the operation is processed, so can only provide
4338 * an upper estimate. For some nonidempotent operations (such as
4339 * getattr), it's not necessarily a problem if that estimate is wrong,
4340 * as we can fail it after processing without significant side effects.
4341 */
nfsd4_check_resp_size(struct nfsd4_compoundres * resp,u32 respsize)4342 __be32 nfsd4_check_resp_size(struct nfsd4_compoundres *resp, u32 respsize)
4343 {
4344 struct xdr_buf *buf = &resp->rqstp->rq_res;
4345 struct nfsd4_slot *slot = resp->cstate.slot;
4346
4347 if (buf->len + respsize <= buf->buflen)
4348 return nfs_ok;
4349 if (!nfsd4_has_session(&resp->cstate))
4350 return nfserr_resource;
4351 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS) {
4352 WARN_ON_ONCE(1);
4353 return nfserr_rep_too_big_to_cache;
4354 }
4355 return nfserr_rep_too_big;
4356 }
4357
4358 void
nfsd4_encode_operation(struct nfsd4_compoundres * resp,struct nfsd4_op * op)4359 nfsd4_encode_operation(struct nfsd4_compoundres *resp, struct nfsd4_op *op)
4360 {
4361 struct xdr_stream *xdr = &resp->xdr;
4362 struct nfs4_stateowner *so = resp->cstate.replay_owner;
4363 struct svc_rqst *rqstp = resp->rqstp;
4364 const struct nfsd4_operation *opdesc = op->opdesc;
4365 int post_err_offset;
4366 nfsd4_enc encoder;
4367 __be32 *p;
4368
4369 p = xdr_reserve_space(xdr, 8);
4370 if (!p) {
4371 WARN_ON_ONCE(1);
4372 return;
4373 }
4374 *p++ = cpu_to_be32(op->opnum);
4375 post_err_offset = xdr->buf->len;
4376
4377 if (op->opnum == OP_ILLEGAL)
4378 goto status;
4379 if (op->status && opdesc &&
4380 !(opdesc->op_flags & OP_NONTRIVIAL_ERROR_ENCODE))
4381 goto status;
4382 BUG_ON(op->opnum < 0 || op->opnum >= ARRAY_SIZE(nfsd4_enc_ops) ||
4383 !nfsd4_enc_ops[op->opnum]);
4384 encoder = nfsd4_enc_ops[op->opnum];
4385 op->status = encoder(resp, op->status, &op->u);
4386 if (opdesc && opdesc->op_release)
4387 opdesc->op_release(&op->u);
4388 xdr_commit_encode(xdr);
4389
4390 /* nfsd4_check_resp_size guarantees enough room for error status */
4391 if (!op->status) {
4392 int space_needed = 0;
4393 if (!nfsd4_last_compound_op(rqstp))
4394 space_needed = COMPOUND_ERR_SLACK_SPACE;
4395 op->status = nfsd4_check_resp_size(resp, space_needed);
4396 }
4397 if (op->status == nfserr_resource && nfsd4_has_session(&resp->cstate)) {
4398 struct nfsd4_slot *slot = resp->cstate.slot;
4399
4400 if (slot->sl_flags & NFSD4_SLOT_CACHETHIS)
4401 op->status = nfserr_rep_too_big_to_cache;
4402 else
4403 op->status = nfserr_rep_too_big;
4404 }
4405 if (op->status == nfserr_resource ||
4406 op->status == nfserr_rep_too_big ||
4407 op->status == nfserr_rep_too_big_to_cache) {
4408 /*
4409 * The operation may have already been encoded or
4410 * partially encoded. No op returns anything additional
4411 * in the case of one of these three errors, so we can
4412 * just truncate back to after the status. But it's a
4413 * bug if we had to do this on a non-idempotent op:
4414 */
4415 warn_on_nonidempotent_op(op);
4416 xdr_truncate_encode(xdr, post_err_offset);
4417 }
4418 if (so) {
4419 int len = xdr->buf->len - post_err_offset;
4420
4421 so->so_replay.rp_status = op->status;
4422 so->so_replay.rp_buflen = len;
4423 read_bytes_from_xdr_buf(xdr->buf, post_err_offset,
4424 so->so_replay.rp_buf, len);
4425 }
4426 status:
4427 /* Note that op->status is already in network byte order: */
4428 write_bytes_to_xdr_buf(xdr->buf, post_err_offset - 4, &op->status, 4);
4429 }
4430
4431 /*
4432 * Encode the reply stored in the stateowner reply cache
4433 *
4434 * XDR note: do not encode rp->rp_buflen: the buffer contains the
4435 * previously sent already encoded operation.
4436 */
4437 void
nfsd4_encode_replay(struct xdr_stream * xdr,struct nfsd4_op * op)4438 nfsd4_encode_replay(struct xdr_stream *xdr, struct nfsd4_op *op)
4439 {
4440 __be32 *p;
4441 struct nfs4_replay *rp = op->replay;
4442
4443 BUG_ON(!rp);
4444
4445 p = xdr_reserve_space(xdr, 8 + rp->rp_buflen);
4446 if (!p) {
4447 WARN_ON_ONCE(1);
4448 return;
4449 }
4450 *p++ = cpu_to_be32(op->opnum);
4451 *p++ = rp->rp_status; /* already xdr'ed */
4452
4453 p = xdr_encode_opaque_fixed(p, rp->rp_buf, rp->rp_buflen);
4454 }
4455
4456 int
nfs4svc_encode_voidres(struct svc_rqst * rqstp,__be32 * p)4457 nfs4svc_encode_voidres(struct svc_rqst *rqstp, __be32 *p)
4458 {
4459 return xdr_ressize_check(rqstp, p);
4460 }
4461
nfsd4_release_compoundargs(struct svc_rqst * rqstp)4462 void nfsd4_release_compoundargs(struct svc_rqst *rqstp)
4463 {
4464 struct nfsd4_compoundargs *args = rqstp->rq_argp;
4465
4466 if (args->ops != args->iops) {
4467 kfree(args->ops);
4468 args->ops = args->iops;
4469 }
4470 kfree(args->tmpp);
4471 args->tmpp = NULL;
4472 while (args->to_free) {
4473 struct svcxdr_tmpbuf *tb = args->to_free;
4474 args->to_free = tb->next;
4475 kfree(tb);
4476 }
4477 }
4478
4479 int
nfs4svc_decode_compoundargs(struct svc_rqst * rqstp,__be32 * p)4480 nfs4svc_decode_compoundargs(struct svc_rqst *rqstp, __be32 *p)
4481 {
4482 struct nfsd4_compoundargs *args = rqstp->rq_argp;
4483
4484 if (rqstp->rq_arg.head[0].iov_len % 4) {
4485 /* client is nuts */
4486 dprintk("%s: compound not properly padded! (peeraddr=%pISc xid=0x%x)",
4487 __func__, svc_addr(rqstp), be32_to_cpu(rqstp->rq_xid));
4488 return 0;
4489 }
4490 args->p = p;
4491 args->end = rqstp->rq_arg.head[0].iov_base + rqstp->rq_arg.head[0].iov_len;
4492 args->pagelist = rqstp->rq_arg.pages;
4493 args->pagelen = rqstp->rq_arg.page_len;
4494 args->tail = false;
4495 args->tmpp = NULL;
4496 args->to_free = NULL;
4497 args->ops = args->iops;
4498 args->rqstp = rqstp;
4499
4500 return !nfsd4_decode_compound(args);
4501 }
4502
4503 int
nfs4svc_encode_compoundres(struct svc_rqst * rqstp,__be32 * p)4504 nfs4svc_encode_compoundres(struct svc_rqst *rqstp, __be32 *p)
4505 {
4506 /*
4507 * All that remains is to write the tag and operation count...
4508 */
4509 struct nfsd4_compoundres *resp = rqstp->rq_resp;
4510 struct xdr_buf *buf = resp->xdr.buf;
4511
4512 WARN_ON_ONCE(buf->len != buf->head[0].iov_len + buf->page_len +
4513 buf->tail[0].iov_len);
4514
4515 rqstp->rq_next_page = resp->xdr.page_ptr + 1;
4516
4517 p = resp->tagp;
4518 *p++ = htonl(resp->taglen);
4519 memcpy(p, resp->tag, resp->taglen);
4520 p += XDR_QUADLEN(resp->taglen);
4521 *p++ = htonl(resp->opcnt);
4522
4523 nfsd4_sequence_done(resp);
4524 return 1;
4525 }
4526
4527 /*
4528 * Local variables:
4529 * c-basic-offset: 8
4530 * End:
4531 */
4532